GRC Consultant

Koda Tech; Antwerpen; On-site; EUR 70,000 - 110,000; Full time

Job summary

Koda Tech is seeking an experienced GRC Consultant to support governance, risk and compliance activities for a major organisation. The role combines hands-on GRC delivery with stakeholder management and provides the opportunity to work across security frameworks, regulatory requirements and technology risk.

The position requires 5+ years of experience in GRC or related fields, strong knowledge of ISO 27001, NIS2, and NIST, and the ability to drive risk assessments, controls, audits and

Qualifications

• 5+ years of experience within GRC, Information Security or IT Risk.
• Knowledge of ISO 27001, NIS2, NIST or similar frameworks/regulations.
• Experience with risk assessments, controls, audits and remediation.
• Strong stakeholder management and communication skills.

Responsibilities

• Performing cyber and information security risk assessments.
• Supporting the development and improvement of security policies, controls and governance frameworks.
• Identifying security gaps and driving remediation plans with relevant teams.
• Supporting internal/external audits and maintaining audit-ready evidence.
• Working with technical and business stakeholders to translate risks into practical actions.
• Supporting regulatory and security compliance initiatives.
• 5+ years experience within GRC, Information Security or IT Risk.
• Good knowledge of ISO 27001, NIS2, NIST or similar frameworks/regulations.
• Experience with risk assessments, controls, audits and remediation.
• Comfortable working across Cyber Security, IT, Risk, Compliance and business teams.
• Strong stakeholder management and communication skills.
• English plus Dutch or French would be advantageous.

Skills

GRC

Information Security

IT Risk

ISO 27001

NIS2

NIST

Audits

Remediation

Stakeholder management

Job description

We're looking for an experienced GRC Consultant to support a major organisation with its ongoing cyber security governance, risk and compliance activities.

The role combines hands-on GRC delivery with stakeholder management and provides the opportunity to work across security frameworks, regulatory requirements and technology risk.

What you'll be doing:

• Performing cyber and information security risk assessments.
• Supporting the development and improvement of security policies, controls and governance frameworks.
• Identifying security gaps and driving remediation plans with relevant teams.
• Supporting internal/external audits and maintaining audit-ready evidence.
• Working with technical and business stakeholders to translate risks into practical actions.
• Supporting regulatory and security compliance initiatives.
• 5+ years experience within GRC, Information Security or IT Risk.
• Good knowledge of ISO 27001, NIS2, NIST or similar frameworks/regulations.
• Experience with risk assessments, controls, audits and remediation.
• Comfortable working across Cyber Security, IT, Risk, Compliance and business teams.
• Strong stakeholder management and communication skills.
• English plus Dutch or French would be advantageous.

Contract: Freelance or Permanent (Open to Both)