For our client in Charleroi we are looking for a Support Engineer, see the details below. Don't hesitate to contact me if you're interested.
Longterm Project
Hybrid - 2 days onsite/week
Description - Information Security GRC Specialist
Mission Context
As part of its activities, our client is seeking an operational specialist in Information Security Governance, Risk, and Compliance (GRC) to strengthen the Information Security Office.
You will join the Governance, Risk, and Compliance team, responsible for ensuring adherence to security standards, processes, and the overall information security governance framework.
Main Responsibilities
As a GRC Specialist, you will be responsible for:
Exception Management & Compliance
- Ensuring the follow‑up and continuous improvement of the security exception management process.
- Tracking compliance deviations related to security governance policies and standards.
- Managing and monitoring risk treatment mitigation measures originating from risk analyses (Ebios Risk Manager).
- Following up on recommendations and remediation actions stemming from:
-
- penetration tests,
- configuration audits,
- internal or external compliance audits.
Reporting & Governance Oversight
- Producing KPIs and dashboards related to security exceptions for management reporting.
Secondary Responsibilities
- Managing the team's mailbox, ensuring efficient daily follow‑up.
- Managing the publication and updates of governance documents.
- Contributing to the handling of security questionnaires for suppliers.
Required Profile
Essential Skills (Must‑Have)
- 5 years of experience in information security, including at least 3 years in GRC.
- Excellent command of spoken and written French (C2 level).
- Strong organizational skills with a methodical and structured approach.
- Autonomy, proactivity, and a strong sense of responsibility.
- Excellent communication skills and ability to work effectively in a team.
- Good understanding of ISO 27001.
Nice‑to‑Have Skills
- Knowledge of Risk Management (preferably EBIOS RM).
- General understanding of security technologies (antivirus, firewalls, etc.).
- Experience in Operational Security.
- Participation in or contribution to an ISO 27001 certification project.
Soft Skills
- Strong sense of rigor and confidentiality.
- Results‑oriented mindset.
- Ability to explain security concepts to non‑technical stakeholders.
- Adaptability in complex or regulated environments.
