Medior GRC Cybersecurity Expert

Keystone Solutions; Namen; Hybride; EUR 55 000 - 75 000; Plein temps

Résumé du poste

Keystone Solutions recherche un Expert GRC Cybersecurity de niveau médior pour une mission de conseil chez un client, axée sur la gestion des risques et la mise à jour de la documentation sécurité.

Vous travaillerez au sein d'une équipe pluridisciplinaire sous la supervision d'experts seniors, en produisant des livrables et en suivant les processus GRC, avec un accent fort sur la traçabilité et les indicateurs.

Qualifications

• Diplôme de Bachelor ou Master en informatique, cybersécurité, gestion des risques ou équivalent.
• Minimum 3 années d'expérience en cybersécurité, gestion des risques ou conformité.
• Expérience pratique en analyses de risques.
• Expérience en rédaction et mise à jour de documents de gouvernance ou de conformité.

Responsabilités

• Conduire des analyses de risques et suivre les plans de traitement.
• Maintenir les registres de risques et produire des rapports associés.
• Rédiger et mettre à jour les politiques et procédures de sécurité.
• Contribuer aux activités de conformité (NIS2/ISO27001) et audits.
• Alimenter les outils GRC et les tableaux de bord de gouvernance.

Connaissances

GRC competence

Risk analysis

Governance policies

Cybersecurity knowledge

IT environments knowledge

Formation

Bachelor's or Master's in CS/cybersecurity/risk management

Outils

GRC platforms

Description du poste

Mission Overview:

Keystone Solutions is seeking a Medior GRC Cybersecurity Expert for a consultancy mission at a client site. The successful candidate will join a multidisciplinary team dedicated to cybersecurity and will primarily contribute to risk management activities and the updating of security documentation.

Main Responsibilities:

The Medior GRC Expert will contribute to the operational implementation of Governance, Risk, and Compliance (GRC) activities. This role will be performed under the supervision of senior experts and will include:

• Conducting cyber risk management activities;
• Reviewing and updating security policies, standards, and procedures;
• Executing various operational activities related to governance, compliance, and information security management systems.

The expert will play an operational role, contributing to deliverables, executing processes, and monitoring GRC activities defined by senior management.

Activities:

• Conducting cyber risk analyses and monitoring treatment plans;
• Maintaining risk registers and producing associated reports;
• Reviewing and drafting security policies, standards, and procedures under senior expert supervision;
• Contributing to compliance activities (NIS2, CyFun, ISO 27001) and audits;
• Feeding GRC tools, ISMS, and governance dashboards;
• Supporting the Governance, Risk, and Compliance activities of the Security Pole.

Depending on service priorities, the expert may also work on other security program themes.

Profile Requirements:

Education & Experience:

• Higher education degree (Bachelor's or Master's) in computer science, cybersecurity, risk management, or equivalent;
• Minimum 3 years of experience in a cybersecurity, risk management, or compliance role;
• Practical experience in conducting risk analyses;
• Experience in drafting or updating governance or compliance documents.

Technical Skills:

• Good knowledge of cybersecurity risk management principles;
• Familiarity with ISO 27005 and ISO 27001 standards;
• Knowledge of NIS2 requirements;
• Knowledge of CyFun is a plus;
• Good understanding of IT environments: infrastructures, networks, systems, Active Directory, cloud, applications;
• Ability to use tracking, reporting tools, and GRC platforms.

Personal Qualities:

• Excellent writing skills;
• Ability to structure and synthesize complex information;
• Documentary rigor;
• Organizational skills and prioritization;
• Good listening and communication skills;
• Ability to work with technical and business stakeholders;
• Team spirit;
• Autonomy in task execution.

What We Are Looking For:

We are looking for a GRC expert capable of producing risk analyses, drafting quality security documents, and ensuring rigorous monitoring of GRC activities. The expert will join an existing team and work under the guidance of senior experts. Their added value lies in their ability to effectively execute defined processes, produce quality deliverables, and concretely advance the governance, risk management, and compliance activities.

Soft Skills:

• Rigor in task execution;
• Organizational skills;
• Analytical mindset;
• Good written and oral communication;
• Team spirit.

Evaluation Method:

Remaining candidates will be invited for an interview with a jury, the composition of which will be communicated later. The interview may take place remotely if necessary. On-site selection interviews will occur within 1 to 2 weeks following the submission date, at times set by the client. Unavailability to participate in the interview will result in exclusion.

The interview aims to evaluate:

• Fit for the mission;
• Skills;Communication and personal qualities;
• Motivation and cultural fit.

Duration:

Duration: 04/01/2027 - 14/06/2027 6 months (full time)

Skills required:

• Compétence GRC
• (mandatory) - Level: T2 - Confirmed - Most recent: This year
• Gestion des fournisseurs, marchés publics - Level: T1 - Junior - Most recent: Any time
• Gestion des risques
• (mandatory) - Level: T2 - Confirmed - Most recent: This year
• Gouvernance sécurité / Rédaction de politiques de sécurité - Level: T2 - Confirmed - Most recent: This year
• Référentiels Cyber sécurité (NIS2/ISO27001) - Level: T2 - Confirmed - Most recent: This year
• (mandatory) - Level: T2 - Confirmed - Most recent: This year
• Utilisation d'outils GRC - Level: T2 - Confirmed - Most recent: This year

Language requirements:

French
(mandatory)
Level Proficiency (C2)