> Markdown version of [/jobs/ext/4696833-grc-consultant](https://www.wearedevelopers.com/jobs/ext/4696833-grc-consultant). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# GRC Consultant

- **Company:** Futurwork
- **Location:** Elsene, Belgium
- **Experience:** Experienced
- **Contract:** Permanent contract
- **Skills:** Information Security Management System, CIS Benchmarks
- **Published:** November 13, 2026
- **Apply:** https://www.actiris.brussels/nl/burgers/jobadvertentie/?reference=5997020

## About the Role

* 3 to 7 years of experience in GRC/cybersecurity
 * Frameworks & standards: ISO 27001 (present in one need out of two ¿ the most requested), NIS2, GDPR, DORA, NIST, CIS Controls
 * Risk analysis methodology: EBIOS RM
 * Belgian framework: CyberFundamentals (CyFun, CCB)
 * Mandatory certification: at least one of the following ¿ CISSP, CISM, ISO 27001 Lead Implementer/Lead Auditor, CRISC or CISA
 * Fluent English required; proficiency in at least one of the two national languages (French or Dutch) required

Diploma

 * Bachelor
 * Master

## Description

* Conduct risk analyses (EBIOS RM, ISO 27005)
 * Carry out audits, gap analyses and ISMS maturity assessments
 * Write and maintain security documentation (policies, procedures, charters)
 * Support regulatory compliance (NIS2, DORA, GDPR, and CyberFundamentals for the Belgian market)
 * Build and track risk treatment and remediation plans
 * Prepare ISO 27001 certification audits
 * Drive security governance (committees, CISO/management reporting)
 * Raise awareness and train staff on security matters
 * For medior/senior profiles: contribute to client needs qualification and RFP responses