Senior GRC Expert – Cybersecurity Compliance & NIS 2

Our client, a leading organization in the transport and infrastructure sector, is seeking an expert to strengthen their cybersecurity governance. This professional will ensure adherence to European directives and lead the implementation of security frameworks to safeguard critical infrastructure.

• Lead the implementation and management of NIS 2 compliance, including gap analysis and policy development.
• Oversee the Cyber Fundamentals program to ensure all baseline security controls are effective.
• Maintain the Information Security Management System (ISMS) in alignment with ISO 27001, 27002, and 27005.
• Conduct risk assessments and internal audits to ensure compliance with GDPR, AI Act, and CER.
• Coordinate with stakeholders and regulators to provide accurate and timely compliance reporting.
• Provide cybersecurity training and awareness sessions to staff and management.

• You bring 10+ years of experience in enterprise IT, risk, and audit management with a focus on cybersecurity and IT governance.
• You possess 3+ years of experience implementing and auditing ISMS, NIS 2, SOX, or GDPR frameworks.
• You have 2+ years of experience working within the railway or transport sector.
• You have 2+ years of experience in a non-IT business role such as finance, operations, or procurement.
• You possess ISO 27001 Lead Auditor & Implementer and ISO 27005 Lead Risk Manager certifications.
• You're a Certified Internal Auditor (CIA).
• You bring technical proficiency in ITGC, COBIT, and Agile or Kanban methodologies.
• You possess a Bachelor's degree at minimum.
• You're autonomous, structured, and possess strong analytical and problem-solving skills.
• You are fluent in English and either French or Dutch, with at least a basic knowledge of Dutch or French.

Nice to Haves

• Completed CISA or CISM training.
• Experience using Confluence for documentation.
• Willingness to assume interim leadership or project management roles.

• Start date: 11/05/2026
• Duration: Until 31/12/2027
• Work regime: Full-time
• Location: Brussels
• Working model: Hybrid
• Contract: open to both permanent employees and freelancers