GRC Officer

Bridge Industrial bv.; Brussel Hoofdstad; Sur place; EUR 42 000 - 56 000; Plein temps

Avantages offerts par ce poste

One day homeworking per week

Résumé du poste

Bridge Industrial bv. is seeking a hands-on GRC Officer in Belgium to drive governance, risk and compliance activities within a dynamic legal services client. You will create and maintain GRC processes and information security policies, aligning with GDPR, NIS2 and the EU AI Act.

You will support risk assessments for IT systems and vendors, maintain risk registers, and report progress to the Digital Risk & Compliance Lead. French and English fluency is required, with Dutch being a plus.

Qualifications

• 1–2 years of experience in information security management, GRC or a related discipline.
• Strong willingness to grow and develop in the GRC field.
• Familiarity with GDPR, NIS2, EU AI Act and ISO 27001/CIS18/NIST CSF.
• Experience with risk assessments, audit prep or third-party risk questionnaires.

Responsabilités

• Create, document and maintain GRC processes, guidelines and information security policies.
• Support risk assessments on IT systems, vendors and digital projects and maintain risk registers.
• Assist with compliance with NIS2, GDPR and EU AI Act; prepare audit evidence and track findings.
• Execute vendor risk assessments and maintain third-party risk inventory.
• Track control effectiveness through KPIs and prepare status reports for leadership.
• Support security awareness initiatives and respond to day-to-day security questions.

Connaissances

Communication skills

Structured and precise

Fluent English and French

Dutch is a plus

Risk management basics

Outils

GRC platform

Risk assessment tools

Description du poste

Our client, a dynamic legal services firm, is undergoing a far-reaching digital transformation. With the rapid adoption of cloud technologies, AI applications and automated processes, their digital risk landscape is growing in complexity. To support this securely and compliantly, they are expanding their team with a hands-on GRC Officer.

You report directly to the Digital Risk & Compliance Lead and support the execution of the governance, risk and compliance activities. A key part of your role is creating and maintaining the processes, guidelines and policies that form the foundation of their GRC practice.

Responsibilities:

• Create, document and maintain GRC processes, guidelines and information security policies, aligned with evolving regulations and business needs.


• Support risk assessments on IT systems, vendors and digital projects (ISO 27001, CIS18, NIST) and maintain the risk register and treatment plans.


• Support compliance with NIS2, GDPR and the EU AI Act; prepare audit evidence and follow up on findings until closure.


• Execute vendor risk assessments and security questionnaires; maintain the third-party risk inventory.


• Track control effectiveness through KPIs and prepare status reports for the Lead and senior management.


• Support security awareness initiatives and act as first point of contact for day-to-day security and compliance questions.

Profile:

• 1 to 2 years of experience in information security management, third-party risk management, GRC or a related discipline.


• A strong willingness to grow and develop further in the GRC field.


• First practical experience with regulatory frameworks (GDPR, NIS2, EU AI Act) and standards (ISO 27001, CIS18, NIST CSF).


• Hands-on exposure to risk assessments, audit preparation or third-party risk questionnaires.


• Structured, precise and self-organizing, with strong communication skills towards non-technical colleagues.


• Certifications such as ISO 27001 Foundation/Lead Implementer or CompTIA Security+ are an advantage.


• Fluent in French and English; knowledge of Dutch is a plus.


• Experience with (or exposure to) an ISMS or GRC platform.


• Good understanding of cloud and SaaS environments (Azure, Microsoft 365) and their governance implications.


• Basic knowledge of IAM concepts (RBAC, MFA, Active Directory / Entra ID).


• Understanding of data classification and privacy-by-design in the context of GDPR.


• Familiarity with vulnerability management, patching and endpoint protection concepts.

Offer:

• A clearly scoped assignment with real ownership of the operational GRC agenda.


• Close collaboration with an experienced Lead - a strong learning environment for growing into a senior risk role.


• 1 day of homeworking per week, with possibility of extension based on mutual agreement.