> Markdown version of [/jobs/ext/2157046-it-and-cyber-governance-risk-and-compliance-expert](https://www.wearedevelopers.com/jobs/ext/2157046-it-and-cyber-governance-risk-and-compliance-expert). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# IT and Cyber Governance Risk and Compliance Expert

- **Company:** Synctiv
- **Location:** Brussel, Belgium (Remote available)
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Software System Penetration Testing, Software as a Service, Cloud Computing Security, Infrastructure as a Service (IaaS), Platform as a Service (PAAS), Software Vulnerability Management, Software Security, Cyber Threat Analysis, Servicenow, Vulnerability Analysis
- **Published:** August 21, 2026
- **Apply:** https://www.careerjet.be/jobad/be88b17de3bb421bd338610cfb1fbf1524

## About the Role

8+ years of experience in IT & Cyber Governance, Risk & Compliance
Strong experience in:
IT & Cyber Risk Management
Third-Party Risk Management
Cloud security assessments (SaaS, IaaS, PaaS)
Security governance within enterprise environments
Experience conducting supplier and vendor security assessments
Familiarity with:
ISO 27001
SOC frameworks, EBA guidelines
Experience reviewing penetration testing and vulnerability assessment reports
Strong understanding of operational and security risk management processes
Technical Environment
Experience with the following is considered highly valuable:
Vulnerability Management
Application Security
Penetration Testing methodologies
Cloud Security Governance
ServiceNow GRC
Audit & control frameworks
Profile
Master's degree or equivalent experience
Certifications such as CISSP, CISM, CISA, CCSK or CIPP are a plus
Strong stakeholder management and communication skills
Autonomous, hands-on, and solution-oriented mindset
Ability to work in complex and multicultural environments
Strong analytical and synthesis capabilities
Languages
French: Fluent (mandatory)
English: Fluent (mandatory)
Dutch: Fluent (plus)

## Description

Our client, a leading international organization operating in a highly regulated environment, is looking for an experienced IT & Cyber GRC Expert to strengthen its Governance, Risk & Compliance team.
This role focuses on IT and Cyber Risk Management, Third-Party Risk, Cloud Security Governance, and regulatory compliance within a large-scale enterprise environment.
Your Responsibilities
Support operational GRC activities including:
ICT control execution
Third-party technology risk assessments
Supplier security posture monitoring
Contractual security clause reviews
On-site supplier audits
Contribute to the continuous improvement of GRC processes and tools
Translate internal and regulatory requirements into practical implementation approaches
Analyze and document cybersecurity and risk-related issues with actionable recommendations
Support the implementation and optimization of IT & Cyber governance frameworks
Collaborate with business, procurement, legal, continuity, privacy, and IT stakeholders
Deliver presentations, workshops, and awareness sessions related to risk and compliance topics


## Related Videos

- [Reporting Active Exploits in 24 Hours: Are You Ready for the CRA?](https://www.wearedevelopers.com/videos/100248-reporting-active-exploits-in-24-hours-are-you-ready-for-the-cra)
- [Applying Agile Principles to Incident Management ](https://www.wearedevelopers.com/videos/101-applying-agile-principles-to-incident-management)
- [Beyond the Hype: Building Trustworthy and Reliable LLM Applications with Guardrails](https://www.wearedevelopers.com/videos/1594-beyond-the-hype-building-trustworthy-and-reliable-llm-applications-with-guardrails)
- [Software Security 101: Secure Coding Basics](https://www.wearedevelopers.com/videos/220-software-security-101-secure-coding-basics)
- [Unleashing the Power of Developers: Why Cybersecurity is the Missing Piece?!?](https://www.wearedevelopers.com/videos/712-unleashing-the-power-of-developers-why-cybersecurity-is-the-missing-piece)
- [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure)

## Related Articles

- [Best Companies in the Netherlands: Top 25 Companies in 2023 ](https://www.wearedevelopers.com/magazine/193-best-companies-in-the-netherlands-top-25-companies-in-2023)
- [The Netherlands – Europe’s powerhouse for software development?](https://www.wearedevelopers.com/magazine/31-the-netherlands-europe-s-powerhouse-for-software-development)
- [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs)
- [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market)
- [How to Find Tech Jobs in Amsterdam](https://www.wearedevelopers.com/magazine/279-how-to-find-tech-jobs-in-amsterdam)
- [How to land a developer job in Amsterdam](https://www.wearedevelopers.com/magazine/36-how-to-land-a-developer-job-in-amsterdam)