GRC Manager

Koda Tech; Brussel; On-site; EUR 90,000 - 130,000; Full time

Benefits offered by this job

Learning and development opportunities

Job summary

Koda Tech in Brussels is recruiting a GRC Manager to lead an international client’s governance, risk and compliance program. You will oversee frameworks, controls, and policies across the organization, and partner with business and technology teams to embed risk management into day-to-day operations.

The role involves managing third‑party risk, reporting risk posture to senior leadership, and driving continuous improvement in security governance across industries including financial and

Qualifications

• 5+ years in cybersecurity focusing on GRC.
• Experience managing and improving GRC frameworks (NIST, NIS2, ISO 27001).
• Experience owning risk management, compliance, governance, or security assurance.
• Bachelor's degree preferred; CISSP/CISM/CISA certifications are a plus.

Responsibilities

• Lead the organisation's GRC programme and drive continuous improvement across governance, risk, and compliance.
• Oversee implementation, maintenance, and maturity of security frameworks, policies, standards, and controls.
• Partner with business and technology stakeholders to embed risk management into day-to-day operations.
• Oversee third-party risk management and support regulatory and customer compliance requirements.
• Shape the organisation's security roadmap by driving strategic GRC initiatives and reporting on risk posture to senior leadership.

Skills

GRC management

GRC frameworks

Risk management

Stakeholder management

IT security controls

Lead Auditor/Certifications

Education

Bachelor's degree in Cybersecurity or related field

Job description

I am currently recruiting a GRC Manager for an international client with offices in Brussels. They specialise in providing a broad scope of advisory solutions to clientele in the financial, pharmaceutical and insurance industries with a key area of the business being providing cybersecurity audit and risk advisory.

Requirements

• 5+ years of experience in cybersecurity, with a focus on Governance, Risk & Compliance (GRC)
• Hands-on experience managing and improving GRC frameworks (NIST, NIS2 & ISO 27001)
• Experience owning risk management, compliance, governance, or security assurance
• Strong stakeholder management skills with the ability to influence both technical and non-technical stakeholders
• Knowledge of IT infrastructure, cloud environments, and security controls is an advantage
• Relevant certifications such as CISSP, CISM, CISA, or ISO 27001 Lead Implementer/Auditor are a plus (or willingness to obtain them)
• Bachelor's degree in Cybersecurity, Information Security, IT, or a related field is preferred

Offer

• Join a globally renowned organisation operating in 150+ countries
• Take ownership of the organisation's GRC programme and drive continuous improvement across governance, risk, and compliance
• Lead the implementation, maintenance, and maturity of security frameworks, policies, standards, and controls
• Partner with business and technology stakeholders to embed risk management and compliance into day-to-day operations
• Oversee third-party risk management and support regulatory and customer compliance requirements
• Shape the organisation's security roadmap by driving strategic GRC initiatives and reporting on risk posture to senior leadership
• Strong learning and development opportunities for you and your team