Context
For one of our clients, an organisation running both IT and operational (OT) environments, we are looking for a senior GRC Consultant. You will take over and structure the organisation's compliance work, focusing on the NIS2 Directive and ISO 27001. You won't be starting from scratch. The job is to continue work already in progress, organise the workflows and strengthen the governance framework.
Your responsibilities
- Policy writing: Write clear, practical security policies and procedures that teams can actually use.
- Business continuity (BCM/DRP): Move the Business Continuity Management programme forward and document the Disaster Recovery Plans.
- IT/OT guidelines: Write technical standards and guidelines (for example, secure remote access) based on what operational teams need.
Your profile
- Senior GRC profile with proven experience writing policies and putting compliance frameworks in place.
- Hands-on: you like turning discussions into finished, usable documents, and you deliver against clear objectives.
- Good knowledge of NIS2 and ISO 27001.
- Experience in an industrial or OT environment is a plus but not required.
- You are comfortable running workshops and writing documents together with internal teams.
