GRC Information Security Officer

NextLink Group; Waals-Brabant; On-site; EUR 45,000 - 65,000; Full time

Job summary

NextLink Group in Nivelles, Belgium, is seeking a contractor to support security governance within the GRC team. The role focuses on risk management, exception handling, and improving governance processes.

You will conduct risk assessments with stakeholders, track mitigation actions, prepare dashboards, and drive automation opportunities. Ideal candidates have 1–3 years in information security or GRC, strong analytical and communication skills, and the ability to work independently.

Qualifications

• Must-have basics in information security across domains.
• Ability to perform risk assessments and interact with stakeholders.
• Strong analytical and communication skills; able to work independently.

Responsibilities

• Conducting and supporting security risk assessments with stakeholders.
• Following up on risk mitigation actions and process adherence.
• Managing security exceptions and non-compliance tracking.
• Guiding stakeholders through security governance processes.
• Preparing reports, dashboards, and management reporting.
• Participating in stakeholder meetings and internal operational meetings.
• Identifying opportunities for process improvements and automation.

Skills

InfoSec basics

Risk assessments

Stakeholder communication

Microsoft Office

Self-starter

Analytical skills

Tools

GRC platforms

Job description

Nivelles, Belgium

What is the mission about?

see JD

Job Description

The role sits within the Governance, Risk &Compliance (GRC) team. Thecontractor will support key security governance processes, primarily riskmanagement and exception management activities. The position is operational innature but also offers opportunities to contribute to process improvements,automation initiatives, and maturity enhancement of the security governanceframework.

Typical Day

• Conducting and supporting security risk assessmentswith stakeholders
• Following up on risk mitigation actions and processadherence
• Managing security exceptions and non-compliancetracking
• Guiding stakeholders through security governanceprocesses
• Preparing reports, dashboards, and managementreporting
• Participating in stakeholder meetings and internaloperational meetings
• Identifying opportunities for process improvementsand automation

Requirements

Years of Experience

• Candidates with up to 4-5 years of experience maybe considered if they are motivated by operational work
• Ideal: 1-3 years of experience in InformationSecurity or GRC-related activities

Must Have

• Basic Information Security knowledge acrossmultiple security domains
• Understanding of core IT concepts (networksecurity, network segregation, etc.)
• Ability to perform risk assessments and interactwith stakeholders
• Strong analytical and communication skills
• Ability to work independently and progressivelytake ownership of activities
• Strong Microsoft Office skills (Excel, PowerPoint,Outlook, Teams)

Nice to Have

• Previous experience with Governance, Risk &Compliance (GRC) platforms
• Pharmaceutical industry experience
• Security-related certifications (e.g., ISO 27001)are appreciated but not a selection criterion
• French and/or Dutch language skills