Senior GRC Consultant

Approach Cyber; Vlaanderen; Sur place; EUR 90 000 - 130 000; Plein temps

Avantages offerts par ce poste

CDI contract

Mobility budget or company car

Competitive group insurance including

Résumé du poste

Approach Cyber is a trusted cyber resilience partner supporting organisations across Belgium and Switzerland. With more than 25 years of experience, we help clients strengthen governance, risk, and compliance in an increasingly complex digital world.

We are growing our GRC team and seek a Senior GRC Consultant who can translate security challenges into business language, drive ISMS implementations, and guide clients through NIS2, DORA, and CRA compliance.

Qualifications

• Minimum 3 years of relevant experience in GRC, information security consulting, or a similar advisory role.
• Demonstrated ability to translate security topics into business language for senior stakeholders.
• Fluency in Dutch or French with strong English; tri-lingual profiles valued.

Responsabilités

• Provide client advisory on governance, risk, and regulatory compliance.
• Design and implement ISMS frameworks (ISO 27001) and support certification processes.
• Guide clients through NIS2, DORA, CRA compliance journeys from gap analysis to implementation.
• Develop security roadmaps and actionable plans aligned with client business goals.
• Lead and coordinate security projects and drive change management to deliver measurable results.
• Represent Approach Cyber in the market, build client relationships and identify new business opportunities.

Connaissances

GRC expertise

Information security

Risk management

Client advisory

Description du poste

Approach Cyber is a trusted cyber resilience partner supporting organisations across Belgium and Switzerland. With more than 25 years of experience, over 100 experts, and 1000+ happy clients, we help companies face an increasingly complex digital world, one where threats accelerate, regulations expand, and resilience has become non‑negotiable.

We are currently living a period of genuine growth (both in terms of client demand and geographic ambition). Our GRC team of around 20 experts is at the heart of this momentum, advising organisations across all sectors on how to strengthen their cybersecurity governance, manage risk, and navigate an evolving regulatory landscape.

To keep pace with our ambitions, we are looking for a Senior GRC Consultant who wants more than a consulting role. Someone who wants to contribute to something that is actively being built.

Are you the driver we are looking for?

You are a seasoned GRC professional who thrives in complex environments and knows how to translate security challenges into business language. You are as comfortable facilitating a board‑level risk conversation as you are rolling up your sleeves to implement an ISMS or guide a client through a NIS2 compliance journey.

But beyond this expertise, what makes you stand out is your energy. You bring ideas, you challenge the status quo, and you are deeply invested in your clients’ success. You want to be part of a team that is growing fast, and you want to grow with it.

Whether you are Dutch‑speaking or French‑speaking, there is a meaningful role for you here, with one important distinction.

• on:
  Dutch-speaking people: Flanders is a strategic priority for Approach Cyber. We have significant ambitions for this region and a growing pipeline of opportunities. As part of your role, you will actively contribute to developing the Flemish market: building relationships, representing Approach at events and industry forums, identifying new opportunities, and acting as a credible face of Approach Cyber with prospects and clients in the region. This is a core part of what we are looking
• for.French-speaking people: Your primary focus will be client delivery. That said, your expertise and your network are valuable commercial assets. We will expect you to adopt a consultative selling approach (spotting opportunities during missions, engaging naturally with prospects, and contributing to Approach’s visibility in your professional circl

As a Senior GRC Consultant, your day-to-day will revolve around three areas:

• Client advisory & d

• eliveryPerform cybersecurity maturity assessments using our ACAM® (Approach Cybersecurity Assessment Methodology) and other recognised fram
• eworks.Design and implement Information Security Management Systems (ISMS) based on ISO 27001, and support clients throughout certification pro
• cesses.Guide clients through NIS2, DORA, and CRA compliance journeys (from gap analysis to operational implement
• ation).Develop security roadmaps, define priorities, and translate them into actionable plans that make sense for your client’s business c
• ontext.Lead and coordinate security projects, driving change management and ensuring strategic decisions are turned into concrete r
• esults.Deliver CISO-as-a-Service engagements: provide strategic and technical guidance, support governance structures, and help clients manage security incidents when they
• arise.Build long‑lasting relationships with your clients, as their go‑to advisor, not just their cons
• elopmentActively represent Approach Cyber in the market: attend events, participate in panels, and build a visible presence in the cybersecurity co
• mmunity.Identify and develop new business opportunities, leveraging your network and your expertise as your most credible commercia
• l asset.Engage with prospects in a consultative and authe
• ntic wayReport field insights and market intelligence to help shape our go‑to‑market approach in the

region.
Internal contribution & te

• am growthContribute to the continuous improvement of our methodologies, frameworks, and reusabl
• e assets.Share knowledge with the team: market trends, regulatory evolutions, new frameworks, lessons learnt from t
• he field.Support and mentor junior colleagues, helping them grow and succeed on complex eng
• rofile °°°
  You have a minimum of 3 years of relevant experience in GRC, information security consulting, or a similar adv
• isory role.You hold (or are actively workin g towards) cer tifications in areas such as ISO 27001, NIS2/DORA/CRA compliance, Risk Management, or CISO-as-a-Service. What matters most is that you can demonstrate real, hands‑on experience in these areas. You think strategically: you understand senior management concerns, know how to evaluate business risks, and can translate complex security topics into clear, actionable recommendations.
• mend recommendations.You communicate with confidence and clarity, adapting your language to your audience, whether a technical team or a C‑level sponsor.
• el sponsorship.Language: you are fluent in Dutch (native) or French (native), with a strong command of English. The other national language is a real asset. Trilingual profiles (FR/NL/EN) are especial.
• ly welcome.H

• Human skills Commitme nt and drive: you are invested in your work and in Approach Cyber’s project. You go the extra mile, not because you have to, but because you care about
• the outcome.Trusted Adv isor mindset: you genuinely care about your clients’ success. You are curious about their business, proactive in your recommendations, and honest in yo
• ur guidance. Team player: you thrive in a collaborative environment and actively contribute to the team’s collective success, sharing knowledge and supporting
• colleagues.Integrity withou t compromise: you handle sensitive client and company information with full discret
• ion, always. Ambassador for the profess
• ional values that are at the heart of our philosophy:TOP-NOTCH: We strive for best‑of‑the‑best while staying ahead o
• f the curve.HUMAN‑CENTRIC: We care about people in the di
• gital world.NO‑NONSENSE: We go for it, we work together,
• ur offer °°°
  Join a dynamic and fast-growing company in a
• booming sectorParticipate in the development of the company as a co-creator of innova
• tive solutionsDevelop your career path and add top-level trainings and certificati
• ons to your CVBenefit from an attractive salary package, including a full range

• A CDI contract
• A mobility budget or company car
• A competitive group insurance including pension fund, death, and disability coverage. An attractive complementary insurance for non-work-related accident and loss of salary in case of sickness, company fully supports contribution.
• 32 days holiday/year (on a fulltime equivalent basis)
• A flexible home working policy
• Other fringe benefits (meal vouchers, ec
• am experiencesContribute to a safer, fairer world for data subjects and citizens, ensure the serenity of great businesses and essential publi
• c institutionsLive your values daily in a dynamic, fun and multicultural workin