Expert GRC Cybersecurity

Function

Our client is looking for a mid-level Cybersecurity GRC specialist to support the operational execution of governance, risk, and compliance activities within a multidisciplinary security environment. This opportunity is focused on hands-on delivery: performing cyber risk assessments, maintaining security documentation, and contributing to the ongoing maturity of the organization’s information security framework.

Responsibilities

In this role, you will work under the supervision of senior experts and contribute to the day-to-day execution of GRC activities. Your scope will include:

• Performing cyber risk analyses and following up on treatment plans.
• Maintaining risk registers and preparing related reporting.
• Reviewing and updating security policies, standards, and procedures.
• Supporting compliance activities related to NIS2, CyFun, and ISO 27001, as well as audits.
• Updating GRC tools, the information security management system, and governance dashboards.
• Providing operational support to the security governance, risk, and compliance function.

The role is primarily operational and requires someone who can deliver quality outputs, follow established processes, and contribute effectively to the wider security program.

Technical Skills

• Strong understanding of cybersecurity risk management principles.
• Good knowledge of ISO 27005 and ISO 27001.
• Working knowledge of NIS2 requirements.
• CyFun knowledge is considered an asset.
• Familiarity with IT environments including infrastructure, networks, systems, Active Directory, cloud, and applications.
• Ability to work with tracking, reporting, and GRC platforms.

Profile

• Higher education degree (Bachelor’s or Master’s) in IT, cybersecurity, risk management, or a related field.
• At least 3 years of experience in cybersecurity, risk management, or compliance.
• Practical experience conducting risk assessments.
• Experience writing or updating governance or compliance documentation.
• Experience with vendor management or public procurement is a plus.
• Previous experience in a large organization is an asset.

The ideal candidate is structured, autonomous, and comfortable working with both technical and business stakeholders. Strong analytical thinking, document accuracy, and the ability to synthesize complex information are essential. You should also bring excellent written and verbal communication skills, a collaborative mindset, and a strong sense of organization and priorities.

Language requirements: fluent French.

Contactperson & Reference

• Reference #: INW27908
• Marilyn Weytens
• marilyn.weytens@i4m.be