GRC Consultant

Context

FuturWork recruits GRC consultants to support our clients with risk management, security governance and regulatory compliance. ISO 27001 appears in one out of two of our client needs.

Your day-to-day missions

• Conduct risk analyses (EBIOS RM, ISO 27005)
• Perform audits, gap analyses and ISMS maturity assessments
• Write and maintain security documentation: policies, procedures and charters
• Support regulatory compliance: NIS2, DORA, GDPR and CyberFundamentals for the Belgian market
• Build and follow up risk treatment and remediation plans
• Prepare ISO 27001 certification audits
• Run security governance: committees, reporting to the CISO and management
• Raise awareness and train staff on security topics
• For medior and senior profiles: help qualify client needs and contribute to RFP responses

Working conditions

• Based in Brussels

Your profile

Must-have

• 3 to 7 years of experience in GRC or cybersecurity
• Standards and frameworks: ISO 27001, NIS2, GDPR, DORA, NIST, CIS Controls
• Risk analysis methodology: EBIOS RM
• Belgian framework: CyberFundamentals (CyFun, CCB)
• At least one of these certifications: CISSP, CISM, ISO 27001 Lead Implementer or Lead Auditor, CRISC, CISA
• Fluent English
• Fluency in at least one of Belgium's national languages: French or Dutch

Why FuturWork?

• A trajectory, not just a mission: grow from consultant to supported freelancer or business contributor within the FuturWork ecosystem.
• A yearly training budget for certifications and courses, and a bonus when you earn a strategic certification.
• Referral bonuses when you bring in a candidate or a new mission.
• Defensive cybersecurity, cloud and infrastructure projects only.
• Flexible remote work, agreed with your client.
• Team buildings, afterworks and a yearly FuturWork event.