Principal Consultant - Belgium

Infosys; Brussel Hoofdstad; On-site; EUR 120,000 - 170,000; Full time

Job summary

Infosys Limited in Brussels, Belgium seeks a GRC Security Engineer to establish governance, risk, and compliance capabilities in a greenfield environment. The role includes onboarding the Arcon platform for GRC/PAM integration to enable enterprise-wide security governance, audit readiness, and regulatory compliance.

The incumbent will design risk management frameworks, compliance processes, and a reusable control library, while supporting audits and cross-team collaboration with security,

Qualifications

• Strong experience in risk management, including risk registers and risk assessments.
• Experience in audit support and control validation.
• Policy, governance framework definition and SOPs.

Responsibilities

• Define and implement enterprise GRC framework from scratch.
• Establish risk management methodologies and compliance tracking mechanisms.
• Develop control validation frameworks and audit readiness processes.
• Support Arcon implementation (GRC + PAM) and integration with IAM/ITSM.
• Define and maintain information security policies and SOPs.
• Prepare risk and compliance dashboards and audit reports.
• Collaborate with security, IAM, ITSM and business owners.

Skills

Risk Management

Compliance Mgmt

Audit Support

Policy & Governance

Arcon Platform

Greenfield GRC

IAM/PAM concepts

Network Security

Stakeholder Comm

Tools

Arcon

PAM Platforms

Greenfield GRC

Automation Tools

Job description

Role – Principal Consultant
Technology - Network Security / GRC Engineer (Risk & Compliance – Arcon)
Location – Brussels, Belgium
Experience Range
15+ Years (L2 / L3 / Specialist)
Support Model
Business hours + On-call (as required for audits/compliance cycles)

Role Summary

The GRC Security Engineer is responsible for establishing and managing Governance, Risk, and Compliance (GRC) capabilities in a greenfield environment (no existing GRC tool).
The role includes designing and implementing risk management frameworks, compliance processes, and onboarding Arcon platform (for GRC/PAM integration) to ensure enterprise-wide security governance, audit readiness, and regulatory compliance.

Key Responsibilities

1. GRC Framework Design (Greenfield Setup)

• Define and implement enterprise GRC framework from scratch
• Establish:
  
  • Risk management methodologies
  • Compliance tracking mechanisms
  • Control validation frameworks
• Align with standards such as:
  
  • ISO 27001, NIST CSF, CIS Controls

2. Risk Management

• Perform enterprise risk assessments:
  • Identify, assess, and prioritize risks
  • Conduct risk scoring and impact analysis
• Maintain:
  • Risk registers
  • Risk treatment and mitigation plans
• Track risk remediation execution and closure

3. Compliance Management

• Define and implement compliance framework and control library
• Ensure adherence to:
  • Regulatory requirements
  • Internal security policies
• Perform:
  • Compliance assessments and gap analysis
  • Control testing and validation
• Manage audit lifecycle:
  • Internal audits
  • External/regulatory audits

4. Arcon Implementation (GRC + PAM Integration)

• Support implementation of Arcon platform (new deployment)
• Configure:
  • Access governance and compliance controls
  • Risk monitoring dashboards (if integrated with PAM)
• Integrate Arcon with:
  • Identity and access management systems
  • ITSM / ticketing systems
• Support access risk control, audit logs, and privileged activity tracking

5. Policy, Governance & Documentation

• Define and maintain:
  • Information security policies
  • Standard operating procedures (SOPs)
  • Control documentation
• Drive policy enforcement and governance reviews
• Ensure periodic updates to policies based on regulatory changes

6. Audit & Reporting

• Prepare and present:
  • Risk and compliance dashboards
  • Audit reports and findings
• Track:
  • Non-compliance issues
  • Audit observations and closure
• Provide evidence for audit and certification requirements

7. Stakeholder & Cross-Team Collaboration

• Work with:
  • Security, infrastructure, IAM/PAM teams
  • Business and application owners
• Provide guidance on:
  • Risk acceptance and mitigation strategies
• Act as a bridge between technical teams and compliance stakeholders

Mandatory Skills

Core GRC Skills

• Strong experience in:
  • Risk Management (Risk Register, Risk Assessment)
  • Compliance Management (ISO 27001, NIST, CIS)
• Experience in:
  • Audit support and control validation
  • Policy and governance framework definition

Tooling & Platform

• Experience with:
  • Arcon (or similar PAM/GRC platforms)
• Ability to work in:
  • No-tool / greenfield GRC setup environments
  • Manual processes transitioning to automated solutions

Security & Networking Knowledge

• Good understanding of:
  • Network security, IAM/PAM concepts
  • Infrastructure and application security
• Ability to map technical risks to business impact

Desired / Good-to-Have Skills

• Experience with:
  • GRC tools (ServiceNow GRC, Archer, OneTrust – optional)
  • PAM solutions (Arcon, CyberArk, BeyondTrust)
• Knowledge of:
  • Cloud compliance (AWS/Azure security frameworks)
• Automation and reporting skills (Excel dashboards, Power BI)

Certifications (Preferred)

• CISA / CRISC / ISO 27001 Lead Auditor or Implementer
• CISSP (optional)
• Risk & Compliance certifications

Soft Skills

• Strong analytical and problem-solving capabilities
• Ability to define and structure processes in ambiguous or greenfield environments
• Excellent stakeholder communication
• Strong documentation and reporting skills

Key Outcomes / Success Metrics

• Establishment of end-to-end GRC framework from scratch
• Improved risk visibility and mitigation tracking
• Successful audit readiness and compliance adherence
• Effective onboarding and utilization of Arcon platform
• Reduction in compliance gaps and audit findings

About Infosys

Infosys is a global leader in next-generation digital services and consulting. We enable clients in 59 countries to navigate their digital transformation.
With over four decades of experience in managing the systems and workings of global enterprises, we expertly steer clients, in 59 countries, as they navigate their digital transformation powered by cloud and AI. We enable them with an AI-first core, empower the business with agile digital at scale and drive continuous improvement with always-on learning through the transfer of digital skills, expertise, and ideas from our innovation ecosystem. We are deeply committed to being a well-governed, environmentally sustainable organization where diverse talent thrives in an inclusive workplace.