GRC Information Security Consultant — Flexible Hours & Growth

BDO Belgium; Zaventem; Hybrid; EUR 60,000 - 90,000; Full time

Benefits offered by this job

Flexible working hours

BDO Academy training

Open and supportive culture

Competitive salary package

Sustainability policy

Job summary

BDO Belgium is seeking an Information Security GRC Consultant to drive robust control programs and elevate clients' security posture. You will lead maturity assessments, design comprehensive GRC strategies, and implement policies aligning with industry best practices.

With a focus on regulations like NIST and ISO 27001, you’ll work across vendors and client teams, delivering practical risk-based roadmaps and strengthening information security governance.

Qualifications

• Master’s Degree and 3–5 years of relevant experience.
• Fluent in English with proficiency in French or Dutch.
• Passionate about Information Security and GRC frameworks.

Responsibilities

• Lead maturity assessments of GRC programs and deliver actionable insights.
• Design and implement comprehensive GRC strategies aligned with business objectives.
• Develop and execute policies, procedures, and controls for IT security risks.
• Establish and monitor IT and information security risk management programs.
• Oversee third-party risk management to ensure vendors meet standards.
• Set up security awareness campaigns.
• Monitor regulations like DORA and NIS2 for client impact.
• Collaborate on strategic exercises to elevate GRC maturity.

Skills

Fluent English

French or Dutch

Excellent communication

Education

Master’s Degree in a relevant field

Tools

GRC Tools

Cloud platforms (Azure/AWS/GCP)

Job description

BDO Belgium is seeking an Information Security GRC Consultant to drive robust control programs and elevate clients' security posture. You will lead maturity assessments, design comprehensive GRC strategies, and implement policies aligning with industry best practices.

With a focus on regulations like NIST and ISO 27001, you’ll work across vendors and client teams, delivering practical risk-based roadmaps and strengthening information security governance.