GRC Officer

V-IT NV; Brussel; Hybride; EUR 42 000 - 65 000; Plein temps

Avantages offerts par ce poste

Hybrid work model

Résumé du poste

V-IT NV is seeking a hands-on GRC Officer to strengthen its Governance, Risk & Compliance team. You will support the implementation and ongoing improvement of information security governance, risk management, and compliance in a dynamic digital environment.

You will collaborate with the Digital Risk & Compliance Lead to build a solid GRC framework by developing policies, processes, and controls, ensuring secure and compliant business operations.

Qualifications

• 1–2 years of experience in Governance, Risk & Compliance (GRC) or related field.
• Experience with ISO 27001, NIST, CIS Controls, GDPR, or similar frameworks.
• Exposure to risk assessments, audits, or vendor security assessments.
• Strong analytical and organizational skills with attention to detail.
• Excellent communication skills and ability to explain security concepts to non-technical stakeholders.
• Eagerness to further develop within the GRC and information security domain.

Responsabilités

• Develop, document, and maintain governance, risk, and compliance processes, policies, and guidelines.
• Support IT risk assessments for systems, suppliers, and digital initiatives.
• Maintain the risk register and follow up on mitigation actions.
• Contribute to compliance with relevant regulations and security frameworks.
• Support internal and external audits by preparing evidence and following up on remediation actions.
• Perform third-party/vendor risk assessments and maintain supplier risk documentation.
• Monitor the effectiveness of security controls and prepare management reports.
• Promote security awareness and provide day-to-day guidance on governance and compliance topics.
• Collaborate with internal stakeholders to continuously improve information security and risk management processes.

Connaissances

GRC

Information security

Risk management

Analytical skills

Communication

Policy development

Outils

GRC platforms

Description du poste

Location

Belgium (Hybrid) ; 4d a week on site

Start Date

ASAP

Contract

Full-time

About the Role

We are looking for a hands-on GRC Officer to strengthen a growing Governance, Risk & Compliance team. In this role, you will support the implementation and continuous improvement of information security governance, risk management, and compliance activities within a dynamic digital environment.

You will work closely with the Digital Risk & Compliance Lead and contribute to establishing a solid GRC framework by developing policies, processes, and controls that support secure and compliant business operations.

Key Responsibilities

• Develop, document, and maintain governance, risk, and compliance processes, policies, and guidelines.
• Support IT risk assessments for systems, suppliers, and digital initiatives.
• Maintain the risk register and follow up on mitigation actions.
• Contribute to compliance with relevant regulations and security frameworks.
• Support internal and external audits by preparing evidence and following up on remediation actions.
• Perform third-party/vendor risk assessments and maintain supplier risk documentation.
• Monitor the effectiveness of security controls and prepare management reports.
• Promote security awareness and provide day-to-day guidance on governance and compliance topics.
• Collaborate with internal stakeholders to continuously improve information security and risk management processes.

Required Skills & Experience

• 1–2 years of experience in Governance, Risk & Compliance (GRC), information security, third-party risk management, or a related field.
• Experience with information security standards and regulatory frameworks such as ISO 27001, NIST, CIS Controls, GDPR, NIS2, or similar.
• Exposure to risk assessments, audit preparation, or vendor security assessments.
• Strong analytical and organizational skills with attention to detail.
• Excellent communication skills and the ability to explain security concepts to non-technical stakeholders.
• Eagerness to further develop within the GRC and information security domain.

Technical Knowledge

• Experience with or exposure to GRC or Information Security Management (ISMS) platforms.
• Good understanding of cloud environments and SaaS governance.
• Basic knowledge of Identity & Access Management (IAM), including concepts such as RBAC, MFA, and directory services.
• Understanding of data classification and privacy principles.
• Familiarity with vulnerability management, patch management, and endpoint security concepts.

Nice to Have

• Relevant certifications such as ISO 27001 Foundation, ISO 27001 Lead Implementer, CompTIA Security+, or similar.
• Experience working in regulated environments.
• Knowledge of modern security and compliance practices.

Languages

• Fluent in French and English.
• Knowledge of Dutch is considered an asset.

What We Offer

• A challenging assignment with ownership of operational GRC activities.
• The opportunity to work closely with experienced security and compliance professionals.
• A collaborative environment with room for learning and professional growth.
• Hybrid working model with a good balance between on-site and remote work.