Senior GRC & Cyber Risk Leader

Koda Tech; Brussel; On-site; EUR 90,000 - 130,000; Full time

Benefits offered by this job

Learning and development opportunities

Job summary

Koda Tech in Brussels is recruiting a GRC Manager to lead an international client’s governance, risk and compliance program. You will oversee frameworks, controls, and policies across the organization, and partner with business and technology teams to embed risk management into day-to-day operations.

The role involves managing third‑party risk, reporting risk posture to senior leadership, and driving continuous improvement in security governance across industries including financial and

Qualifications

• 5+ years in cybersecurity focusing on GRC.
• Experience managing and improving GRC frameworks (NIST, NIS2, ISO 27001).
• Experience owning risk management, compliance, governance, or security assurance.
• Bachelor's degree preferred; CISSP/CISM/CISA certifications are a plus.

Responsibilities

• Lead the organisation's GRC programme and drive continuous improvement across governance, risk, and compliance.
• Oversee implementation, maintenance, and maturity of security frameworks, policies, standards, and controls.
• Partner with business and technology stakeholders to embed risk management into day-to-day operations.
• Oversee third-party risk management and support regulatory and customer compliance requirements.
• Shape the organisation's security roadmap by driving strategic GRC initiatives and reporting on risk posture to senior leadership.

Skills

GRC management

GRC frameworks

Risk management

Stakeholder management

IT security controls

Lead Auditor/Certifications

Education

Bachelor's degree in Cybersecurity or related field

Job description

Koda Tech in Brussels is recruiting a GRC Manager to lead an international client’s governance, risk and compliance program. You will oversee frameworks, controls, and policies across the organization, and partner with business and technology teams to embed risk management into day-to-day operations.

The role involves managing third‑party risk, reporting risk posture to senior leadership, and driving continuous improvement in security governance across industries including financial and