Security

GRC & Information Security Consultant | ISO 27001 · NIS2

Turn security and compliance into real business impact.

Our partner, an established international organisation operating in financial and professional services, is looking for a GRC & Information Security Consultant to strengthen its security and compliance framework.

This is an opportunity to combine internal ownership with client-facing projects, working on meaningful cybersecurity challenges while continuing to develop your expertise in a collaborative and knowledge-driven environment.

GRC & Information Security Consultant - The Job

GRC & ISMS: Maintain and improve information security policies, procedures, risk registers and compliance frameworks.
Risk & Compliance: Conduct risk assessments, gap analyses and compliance reviews, translating regulatory requirements into practical security measures.
Audits & Certifications: Coordinate audit preparation, collect evidence and follow up on findings and corrective actions.
Regulatory Frameworks: Contribute to initiatives involving ISO 27001, NIS2, GDPR and Cyber Fundamentals.
Client Advisory: Support organisations in strengthening their security posture and achieving their compliance objectives.
Continuous Improvement: Streamline GRC processes, improve documentation and reporting, and collaborate with stakeholders across the business.

GRC & Information Security Consultant - The Profile

You have 3–6 years of experience in GRC, information security, IT risk, compliance or internal audit.
You have practical knowledge of ISO 27001, GDPR, NIS2 and/or other relevant security frameworks.
You understand risk management, audit preparation and information security documentation.
You combine strong analytical skills with a structured, proactive and solution-oriented mindset.
You are comfortable working independently and collaborating with different stakeholders; previous consulting experience is a plus.
You are fluent in Dutch and English. French is an asset.

GRC & Information Security Consultant - The Offer

Varied responsibilities: Combine internal security governance with client-facing consulting projects.
Real ownership: Contribute directly to the continuous improvement of security and compliance practices.
Continuous development: Access training, certifications, coaching and knowledge-sharing opportunities.
Collaborative culture: Join a team that values expertise, initiative and professional growth.
Career progression: Expand your expertise across different industries, regulatory frameworks and cybersecurity challenges.
Competitive package: Receive a salary aligned with your experience, complemented by an attractive benefits package.

Voordelen