GRC Consultant

We’re looking for an experienced GRC Consultant to support a major organisation with its ongoing cyber security governance, risk and compliance activities.

The role combines hands-on GRC delivery with stakeholder management and provides the opportunity to work across security frameworks, regulatory requirements and technology risk.

What you'll be doing:

• Performing cyber and information security risk assessments.
• Supporting the development and improvement of security policies, controls and governance frameworks.
• Identifying security gaps and driving remediation plans with relevant teams.
• Supporting internal/external audits and maintaining audit-ready evidence.
• Working with technical and business stakeholders to translate risks into practical actions.
• Supporting regulatory and security compliance initiatives.
• Producing clear risk reporting for senior stakeholders.

We're looking for:

• 5+ years experience within GRC, Information Security or IT Risk.
• Good knowledge of ISO 27001, NIS2, NIST or similar frameworks/regulations.
• Experience with risk assessments, controls, audits and remediation.
• Comfortable working across Cyber Security, IT, Risk, Compliance and business teams.
• Strong stakeholder management and communication skills.
• English plus Dutch or French would be advantageous.

Location: Antwerp | Hybrid Working Set Up

Contract: Freelance or Permanent (Open to Both)