GRC & IS Consultant — Shape Compliance & Security Strategy

Software Search; Netherlands; Hybrid; EUR 9,000 - 11,000; Full time

Benefits offered by this job

Laptop and phone

Training budget

Events & meetups

Flexible hours (32/36/40h)

Job summary

Software Search is seeking a GRC/IS Consultant to help clients gain control over risks, compliance, and information security. The role focuses on translating laws into practical policies, guiding audits, and increasing security awareness on challenging projects.

You will assess and implement GRC frameworks such as GDPR, NIS2, DORA, and ISO 27001, collaborating with management and stakeholders to deliver tangible improvements across organizations.

Qualifications

• Higher professional or university degree in Information Security, IT, Law, or related field.
• 5+ years of experience in GRC, information security, or a similar role.
• Knowledge of GDPR, NIS2, DORA, ISO 27001, NEN 7510, and BIO.
• Certifications such as CISM, CIPP/E, CRISC, CISSP or similar.
• Excellent communication and stakeholder management; fluent in Dutch and English.

Responsibilities

• Analyze processes and risks, develop and implement policies and procedures.
• Guide internal and external audits and ensure regulatory compliance.
• Advise management and translate IT/security topics into business language.
• Develop risk assessments and deliver security awareness training.
• Shape governance, risk, and compliance programs across client organizations.

Skills

Dutch (C1)

English fluent

Stakeholder mgmt

Communication

Security awareness

GRC frameworks

Education

Higher degree in Information Security/IT/Law

CISM

CIPP/E

CRISC

CISSP

Job description

Software Search is seeking a GRC/IS Consultant to help clients gain control over risks, compliance, and information security. The role focuses on translating laws into practical policies, guiding audits, and increasing security awareness on challenging projects.

You will assess and implement GRC frameworks such as GDPR, NIS2, DORA, and ISO 27001, collaborating with management and stakeholders to deliver tangible improvements across organizations.