GRC & InfoSec Lead — ISO27001/NIS2/GDPR

Koda Tech; Brussel Hoofdstad; On-site; EUR 70,000 - 95,000; Full time

Job summary

Koda Tech seeks an experienced GRC Expert to support a major transport and logistics organisation. You will manage cyber and information security risk assessments, ensure alignment with NIS2, ISO 27001 and GDPR, and drive governance across policies, controls and third-party risk.

You will collaborate with IT, security, and business stakeholders to embed security into projects and improve the GRC framework. Fluent English is required; Dutch or French is a bonus.

Qualifications

• Experience in GRC, information security or IT risk.
• Knowledge of ISO 27001/27002, NIS2 and GDPR.
• Experience conducting cyber and information security risk assessments.
• Understanding of security controls, risk treatment and remediation.
• Experience with third-party/supplier risk is desirable.
• Able to work with technical teams and senior stakeholders.
• Experience in transport, logistics, or regulated environments is beneficial.
• Strong English communication; Dutch or French is a bonus.

Responsibilities

• Perform cyber and information security risk assessments across business and IT.
• Identify security risks, control gaps and remediation areas.
• Support compliance with NIS2, ISO 27001 and GDPR.
• Develop and maintain security policies, standards and controls.
• Support third-party and supplier security risk assessments.
• Collaborate with IT, Security, Architecture and business stakeholders.
• Track risks and remediation actions through to closure.
• Translate risks into clear recommendations for management.
• Assist with internal and external security audits.
• Improve the organisation's GRC and information security framework.

Skills

GRC/InfoSec

IT Risk

ISO 27001/27002

NIS2

GDPR

Risk Assessments

Third-Party Risk

Stakeholder Management

English Communication

Job description

Koda Tech seeks an experienced GRC Expert to support a major transport and logistics organisation. You will manage cyber and information security risk assessments, ensure alignment with NIS2, ISO 27001 and GDPR, and drive governance across policies, controls and third-party risk.

You will collaborate with IT, security, and business stakeholders to embed security into projects and improve the GRC framework. Fluent English is required; Dutch or French is a bonus.