Cybersecurity GRC Manager Job ID JP054446

Mission Overview
We are looking for an experienced Cybersecurity GRC Manager to strengthen a cybersecurity team responsible for governance risk management and compliance activities within a critical infrastructure environment. The role focuses on implementing and maintaining Information Security Management Systems (ISMS) supporting ISO 27001 certification initiatives and ensuring compliance with NIS2 requirements across multiple organizations.

• Lead and maintain Information Security Management System (ISMS) documentation including policies procedures risk treatment plans and security governance frameworks.
• Support organizations through ISO 27001 certification programs from gap analysis to certification audits.
• Prepare and coordinate internal and external audits manage non-conformities and ensure continuous improvement of the ISMS.
• Drive NIS2 compliance initiatives for essential and important entities.
• Manage and administer GRC platforms (CISO Assistant or equivalent) for risk control compliance and action plan tracking.
• Conduct risk assessments based on ISO 27005 or equivalent methodologies.
• Facilitate workshops compliance reviews awareness sessions and stakeholder meetings.
• Collaborate closely with CISOs technical teams external partners and business stakeholders.
• Monitor regulatory developments and ensure alignment with security and privacy requirements including GDPR.

• Strong knowledge of ISO 27001:2022 including clauses 410 and Annex A controls.
• Experience implementing and operating an ISMS using the PDCA cycle.
• Expertise in Statement of Applicability (SoA) management and risk treatment planning.
• Solid understanding of NIS2 requirements cybersecurity governance and incident notification obligations.
• Knowledge of GDPR and its integration with security governance frameworks.
• Experience with GRC tools such as CISO Assistant ServiceNow GRC Archer OneTrust or similar platforms.

• Good understanding of IT infrastructure networks cybersecurity controls and information security principles.
• Ability to assess security controls and interact effectively with technical teams.
• Familiarity with complementary frameworks such as CIS Controls IEC 62443 and sector-specific security guidelines.
• Knowledge of MSP environments and critical infrastructure sectors is an advantage.

• Excellent documentation and report-writing skills.
• Strong communication and stakeholder management capabilities.
• Ability to influence without direct authority and drive compliance initiatives.
• Strong facilitation coaching and change management skills.
• Autonomous proactive and results-oriented.
• Comfortable working in multi-client and multi-stakeholder environments.

• 35 years of experience in Information Security GRC Compliance or Cybersecurity Governance roles.
• Proven experience supporting or leading ISO 27001 certification programs through a complete certification cycle.
• Experience in consulting managed services or multi-client environments is highly desirable.
• Experience in regulated sectors such as utilities critical infrastructure energy healthcare or finance is a strong asset.
• ISO 27001 Lead Implementer certification is highly desirable.

• French: Fluent (written and spoken)
• English: Technical proficiency is an asset

• Couillet Belgium
• Hybrid working model

• Long-term consulting assignment with potential extension based on project needs and performance.