Cybersecurity GRC Consultant - Freelance

Missions

• Support end clients in structuring, achieving compliance with, and steering their cybersecurity programs

• Work on governance, risk analysis, and regulatory compliance (NIS2, ISO 27001, DORA, GDPR) in close contact with IT and business leadership

• Conduct maturity audits and gap analyses (ISO 27001, NIS2, CyFun, NIST)

• Perform risk analyses (EBIOS RM, ISO 27005) and build treatment plans

• Write and maintain security policies, procedures, and frameworks (ISMS policy, BCP/DRP, incident management)

• Lead compliance programs and prepare ISO 27001 certifications

• Assess and monitor third-party and supplier security (Third Party Risk Management - TPRM)

• Design security dashboards and KPIs for the executive committee and the CISO

• Run awareness campaigns and crisis exercises

• Contribute to pre-sales activities: scoping, estimation, methodology demos, and tenders

Tools & Environment

• Frameworks and standards: ISO 27001/27002, NIS2, NIST CSF, GDPR, DORA

• Risk analysis methodologies: EBIOS RM, ISO 27005

• Security management: ISMS, BCP/DRP, incident management

• Third Party Risk Management (TPRM)

• Vulnerability management

• Identity and Access Management (IAM)

• Security dashboards and KPIs

• Certifications and training opportunities: ISO 27001 Lead Implementer/Auditor, CISM, CISA, CISSP, CRISC

Working Conditions

• Contract types: Permanent (CDI) or Freelance

• Location: Belgium

• Partial remote work possible

• Start date: As soon as possible

• Duration: 12 months renewable