Senior GRC & ISMS Consultant | ISO 27001/NIS2 Expert

RSM BELGIUM; Zaventem; On-site; EUR 60,000 - 90,000; Full time

Benefits offered by this job

Company car with fuel/charging card

Smartphone + mobile plan

Daily allowance

Group insurance

Sector bonus

Benefits@Work platform

Job summary

RSM BELGIUM in Belgium seeks a GRC & ISMS Consultant to strengthen the internal governance framework and support clients on cybersecurity and compliance journeys.

You will contribute to the ISMS, coordinate compliance activities and help organisations prepare for audits and regulatory requirements such as ISO 27001, GDPR, NIS2. This is a role with growth across industries and hands-on delivery.

Qualifications

• GRC, information security, internal audit experience.
• Knowledge of ISO 27001, GDPR, Cyber Fundamentals and/or NIS2.
• Familiar with risk management and security documentation.
• Analytical with a structured, solution-oriented approach.
• Independent but able to coordinate with stakeholders.
• Consultancy experience is a strong asset.
• ISO 27001 Lead Implementer/Auditor, CISM or CISSP is an advantage.

Responsibilities

• Coordinate internal ISMS and compliance activities in line with ISO 27001:2022, GDPR and internal standards.
• Maintain security policies, procedures, risk registers and compliance documentation.
• Coordinate internal, group and external audits, including evidence collection and corrective actions.
• Support supplier security assessments and third-party risk management.
• Coordinate recurring compliance reviews and actions from control owners.
• Support GDPR and privacy-related activities with the DPO.
• Contribute to security awareness and business continuity activities.
• Simplify and standardise internal GRC processes.
• Improve document lifecycle management, evidence traceability, approval workflows and reporting.
• Promote clear ownership and efficient collaboration between stakeholders.
• Assist clients with ISO 27001, Cyber Fundamentals NIS2, GDPR and related initiatives.
• Conduct risk assessments, gap analyses and compliance reviews.
• Translate organisational security requirements into actionable controls.
• Support preparation for audits.
• Develop reusable consulting methodologies and templates.

Skills

GRC experience

Information Security

Audit preparation

Consultancy experience

ISO 27001 knowledge

Dutch & English

Tools

Microsoft 365

Azure

Job description

RSM BELGIUM in Belgium seeks a GRC & ISMS Consultant to strengthen the internal governance framework and support clients on cybersecurity and compliance journeys.

You will contribute to the ISMS, coordinate compliance activities and help organisations prepare for audits and regulatory requirements such as ISO 27001, GDPR, NIS2. This is a role with growth across industries and hands-on delivery.