Governance, Risk and Compliance Consultant

Function

We're looking for an experienced Governance, Risk & Compliance (GRC) Consultant to join our client's team and play a key role in shaping and delivering a strategic GRC transformation. In this position, you will help define the overall GRC vision, consolidate requirements across the organization, and design a future-proof blueprint for processes, tooling, and governance. You will also contribute to the execution of the implementation roadmap, ensuring alignment between business needs, regulatory requirements, and technology solutions.

Key Responsibilities

As a GRC Consultant, you will:

• Lead the identification and consolidation of GRC-related requirements across multiple business domains, including privacy, audit, third-party risk, and compliance management.
• Analyze existing tools and solutions in use, mapping their capabilities against organizational standards, investment strategy, and technology fit.
• Define and propose a target GRC tooling strategy, including scope definition, solution selection, and architecture considerations.
• Develop a comprehensive implementation roadmap, including effort estimation, resource planning, and licensing requirements.
• Support or lead the execution phase of the implementation, ensuring adherence to requirements and stakeholder alignment.
• Engage with stakeholders across all levels of the organization to gather requirements, facilitate discussions, and ensure consensus on GRC processes and direction.
• Contribute to the application of regulatory frameworks such as ISO 27001, GDPR, and NIS2.
• Provide structure and governance in complex environments involving multiple stakeholders and competing priorities.

Your Profile

To succeed in this role, you bring:

• At least 5 years of experience in GRC concepts, processes, and implementation in large-scale organizations.
• Proven experience as a project or program lead in at least one GRC tooling selection and implementation project within an organization of 1,000+ employees.
• Experience with at least two GRC tools (e.g., ServiceNow GRC, SAI360 or similar platforms).
• Strong background in defining GRC strategies, roadmaps, and implementing governance frameworks.
• Practical experience working with regulatory frameworks such as ISO 27001, GDPR, and NIS2.
• Experience leading projects using both Agile and Waterfall methodologies, including budget, planning, resource, and reporting responsibilities.
• Strong stakeholder management skills, including engagement with senior management and cross-functional teams.
• Excellent facilitation and communication skills, with the ability to translate between technical and non-technical audiences.
• Certification in either ISO/IEC 27001 (Lead Implementer or Lead Auditor) or an ISACA certification (e.g., CRISC or CGEIT).
• Professional proficiency in English (minimum B2) and Dutch or French (minimum C1), with good knowledge of the second national language (minimum B1).
• Legal authorization to work in Belgium and willingness to work onsite in Brussels at least two days per week.

What Our Client Is Looking For

Our client is seeking a strategic and hands-on GRC expert who can operate effectively in complex, multi-stakeholder environments. You are comfortable driving alignment across business and IT, structuring ambiguous requirements into clear strategies, and leading both design and execution phases of transformation programs. This role offers the opportunity to shape a modern GRC landscape while working on high-impact regulatory and compliance initiatives within a large enterprise context.