GRC Expert

Koda Tech; Brussel Hoofdstad; On-site; EUR 70,000 - 95,000; Full time

Job summary

Koda Tech seeks an experienced GRC Expert to support a major transport and logistics organisation. You will manage cyber and information security risk assessments, ensure alignment with NIS2, ISO 27001 and GDPR, and drive governance across policies, controls and third-party risk.

You will collaborate with IT, security, and business stakeholders to embed security into projects and improve the GRC framework. Fluent English is required; Dutch or French is a bonus.

Qualifications

• Experience in GRC, information security or IT risk.
• Knowledge of ISO 27001/27002, NIS2 and GDPR.
• Experience conducting cyber and information security risk assessments.
• Understanding of security controls, risk treatment and remediation.
• Experience with third-party/supplier risk is desirable.
• Able to work with technical teams and senior stakeholders.
• Experience in transport, logistics, or regulated environments is beneficial.
• Strong English communication; Dutch or French is a bonus.

Responsibilities

• Perform cyber and information security risk assessments across business and IT.
• Identify security risks, control gaps and remediation areas.
• Support compliance with NIS2, ISO 27001 and GDPR.
• Develop and maintain security policies, standards and controls.
• Support third-party and supplier security risk assessments.
• Collaborate with IT, Security, Architecture and business stakeholders.
• Track risks and remediation actions through to closure.
• Translate risks into clear recommendations for management.
• Assist with internal and external security audits.
• Improve the organisation's GRC and information security framework.

Skills

GRC/InfoSec

IT Risk

ISO 27001/27002

NIS2

GDPR

Risk Assessments

Third-Party Risk

Stakeholder Management

English Communication

Job description

We are looking for an experienced GRC Expert to support a major organisation within the transport and logistics sector.

You will work across cyber security governance, risk and compliance, helping the business identify and manage information security risks while ensuring alignment with regulatory requirements and recognised security frameworks.

Key Responsibilities

• Perform cyber and information security risk assessments across business and IT environments.
• Identify security risks, control gaps and areas for remediation.
• Support compliance with NIS2, ISO 27001 and GDPR.
• Develop, review and maintain security policies, standards and controls.
• Support third-party and supplier security risk assessments, particularly across critical service providers.
• Work with IT, Security, Architecture and business stakeholders to embed security requirements into projects.
• Track security risks and remediation actions through to closure.
• Translate technical and regulatory risks into clear recommendations for management.
• Support internal and external security audits and compliance activities.
• Contribute to the ongoing improvement of the organisation’s wider GRC and information security framework.

Required Experience

• Strong professional experience within GRC, Information Security or IT Risk.
• Solid knowledge of ISO 27001/27002, NIS2 and GDPR.
• Experience conducting cyber security and information security risk assessments.
• Good understanding of security controls, risk treatment and remediation.
• Experience working with third-party/supplier risk is highly desirable.
• Comfortable working with both technical teams and senior business stakeholders.
• Experience within transport, logistics, critical infrastructure or another regulated environment would be beneficial.
• Strong communication skills in English. Dutch or French is a bonus.