Digital Risk & Compliance Lead - GRC & Security Frameworks

Pauwels Consulting; Elsene; Hybride; EUR 60 000 - 90 000; Plein temps

Résumé du poste

Pauwels Consulting is helping a leading legal sector organization with a digital transformation focused on cloud and AI. We seek a dedicated professional to manage digital risks and ensure compliance while enabling secure growth.

You will develop information security policies, run risk assessments (ISO 27001, CIS18, NIST CSF), monitor threats, support audits, embed security in projects, and build awareness across the company. Fluency in French and English is required.

Qualifications

• 1+ years of experience in information security or IT risk management.
• Practical knowledge of ISO 27001, CIS18, and NIST CSF.
• Understanding GDPR, NIS2, and EU AI Act requirements.
• Experience in vendor risk assessments and IT audits.
• Azure, Microsoft 365, and hybrid infrastructure awareness.
• IAM concepts: RBAC, PAM, MFA, Entra ID.
• Familiarity with vulnerability management tools like Qualys or Tenable.
• Fluent in French and English.

Responsabilités

• Develop and maintain information security policies, standards, and procedures.
• Conduct risk assessments across IT systems and third‑party vendors.
• Monitor threat landscape and mitigate emerging risks.
• Support internal and external IT audits and test controls.
• Collaborate with cross‑functional teams to embed security into projects.
• Implement security controls and build risk awareness training.
• Assess risk and compliance of SaaS vendors and digital partners.

Connaissances

Information security

Risk management

Audits

Regulatory compliance

Formation

ISO 27001 Foundation

ISO 27001 Lead Implementer

CompTIA Security+

Outils

Azure

Microsoft 365

Qualys

Tenable

Entra ID

Description du poste

Pauwels Consulting is helping a leading legal sector organization with a digital transformation focused on cloud and AI. We seek a dedicated professional to manage digital risks and ensure compliance while enabling secure growth.

You will develop information security policies, run risk assessments (ISO 27001, CIS18, NIST CSF), monitor threats, support audits, embed security in projects, and build awareness across the company. Fluency in French and English is required.