GRC Manager (Cybersecurity Governance & Risk)

About the role

We are seeking a seasoned GRC Manager to lead the governance, risk and compliance programme for a multinational advisory firm operating in the financial, pharmaceutical and insurance sectors. Based in Brussels, you will drive the continuous improvement of security frameworks and embed risk‑aware practices across the organisation.

Key responsibilities

• Own the end‑to‑end GRC lifecycle, including design, implementation and maturity of NIST, NIS2 and ISO 27001 frameworks.
• Develop, maintain and enforce security policies, standards and controls.
• Collaborate with business and technology stakeholders to integrate risk management into daily operations.
• Oversee third‑party risk assessments and ensure compliance with regulatory and customer requirements.
• Report risk posture and strategic GRC initiatives to senior leadership and shape the security roadmap.

Required profile

• Minimum 5 years of experience in cybersecurity with a focus on governance, risk and compliance.
• Bachelor’s degree in Cybersecurity, Information Security, IT or a related field (preferred).
• Fluent English; additional language skills are a plus.
• Relevant certifications such as CISSP, CISM, CISA or ISO 27001 Lead Implementer/Auditor (or willingness to obtain).

Required skills

• NIST framework
• NIS2 framework
• ISO 27001
• IT infrastructure
• Cloud environments
• Security controls

What we offer

• Competitive gross salary of €5,000–€7,500 per month.
• Opportunity to lead GRC initiatives for a globally recognised organisation present in 150+ countries.
• Strong learning and development programmes for you and your team.
• Dynamic, multi‑sector environment with exposure to financial, pharmaceutical and insurance clients.