Cyber Security Specialist

OneSource Consulting; Brussel; Hybride; EUR 65 000 - 90 000; Plein temps

Résumé du poste

OneSource Consulting is seeking a GRC Cyber Security Expert Medior to strengthen governance, risk management and compliance capabilities. You will perform risk analyses, update security documents, and contribute to ISMS and NIS2 compliance under senior guidance.

The role is hybrid in Brussels, full-time, with a focus on operational delivery, documenting deliverables, and collaborating with technical and business teams to advance the security programme.

Qualifications

• Bachelor's or Master's degree in Computer Science, Cybersecurity, Risk Management or equivalent.
• Minimum 3 years of experience in cybersecurity, risk management or compliance.
• Experience in conducting risk analyses and drafting governance/compliance documents.

Responsabilités

• Contributes to operational implementation of GRC activities.
• Performs risk analyses and maintains risk registers.
• Reviews and drafts security policies, standards and procedures.
• Supports audits and compliance activities (NIS2, CyFun, ISO 27001).
• Delivers quality security deliverables and documents progress.

Connaissances

Cybersecurity risk management

Risk analyses

Policy drafting

Documentation rigor

Written communication

Team collaboration

ISO 27001/27005

NIS2 knowledge

Formation

Bachelor's or Master's degree in Computer Science / Cybersecurity

Outils

GRC platforms

Active Directory

Cloud environments

Description du poste

Job Title: GRC Cyber Security Expert Medior

Contract Duration: 04/01/2027 - 14/06/2027

Remote Status: Hybrid

Work Regime: Full Time

Job Description - Roles and Responsibilities

CRM Cyber Security Expert Medior

Background

• In order to strengthen its operational capacity in the areas of governance, risk management and compliance, the Security Department wishes to enlist the services of a mediated CRM expert.
• The expert will join a multidisciplinary team dedicated to cybersecurity and will mainly contribute to the execution of risk management activities as well as the updating of the security document repository.
• He will carry out his missions under the supervision of senior experts from the cluster and will apply the methods, procedures and guidelines defined by the CLIENT

Main missions

• The GRC expert contributes to the operational implementation of CLIENT Digital's Governance, Risk and Compliance (GRC) activities.
• The expert will work under the supervision of senior managers and experts from the cluster.

Its activities are mainly focused on:

• carrying out cyber risk management activities;
• reviewing and updating security policies, standards and procedures;
• Performing various operational activities related to governance, compliance and information security management system.
• The expert's role is essentially operational. He contributes to the production of deliverables, the execution of processes and the monitoring of GRC activities defined by the managers and senior experts of the division.

Activities

• Carrying out cyber risk analyses and monitoring treatment plans.
• Maintenance of risk registers and production of associated reports.
• Review and drafting of security policies, standards and procedures under the supervision of senior experts.
• Contribution to compliance activities (NIS2, CyFun, ISO 27001) and audits.
• Feeding of GRC tools, ISMS and governance dashboards.
• Support for the Governance, Risk and Compliance activities of the Security Department.
• Depending on the department's priorities, the expert may be required to work on other themes of the security programme.

Important

• The expert applies the methodology, models and risk management criteria defined by the CLIENT. It does not itself define risk management methods, acceptance thresholds or guidance.

Desired profile

Education & Experience

• Higher education degree (Bachelor's or Master's degree) in Computer Science, Cybersecurity, Risk Management or equivalent field.
• Minimum 3 years of experience in a function related to cybersecurity, risk management or compliance.
• Practical experience in conducting risk analyses.
• Experience in drafting or updating governance or compliance documents.

Technical skills

• Good knowledge of cybersecurity risk management principles.
• Good knowledge of ISO 27005 and ISO 27001 standards.
• Knowledge of NIS2 requirements.
• Knowledge of CyFun is an asset.
• Good understanding of IT environments: infrastructure; networks; systems; Active Directory; cloud; applications.
• Ability to use monitoring, reporting tools and GRC platforms.
• Excellent writing skills.
• Ability to structure and synthesize complex information.
• Documentary rigour.
• Sense of organization and priorities.
• Good listening and communication skills.
• Ability to work with technical and business contacts.
• Team spirit.
• Autonomy in the execution of the tasks entrusted to you.

What we are looking for above all

• We are looking for a CRM expert who can produce risk analyses, draft quality security documents and ensure the rigorous follow-up of GRC activities.
• The expert will join an existing team and work under the supervision of senior experts. Its added value lies above all in its ability to efficiently execute defined processes, produce quality deliverables and concretely advance the governance, risk management and compliance activities of the CLIENT.