GRC Cybersecurity Consultant

Sopra Steria offers tailored, end-to-end corporate technology and software solutions to help clients make bold choices and deliver results. Successfully so! With more than

56.000 colleagues in 30 countries, we rank as Europe’s leading digital solutions provider. Some of the most successful companies in Europe rely on our technology due to our commitment to innovation, collaboration, and value in business development.

The world is how we shape it. Let’s shape it together!

As a GRC Cybersecurity Consultant, you strengthen cybersecurity governance and ensure business practices align with EU and national regulatory requirements. You advise clients and internal stakeholders, translate complex legislation into practical controls, and lead compliance and risk initiatives that improve security posture and operational resilience.

You help ensure operations meet high standards of efficiency, security and legal compliance—by keeping governance and controls current as regulations evolve, and by making audits, risk management and remediation practical and measurable.

Requirements

Cyber & ISMS: cybersecurity expertise, regulated environments, ISMS, security-by-design, audits; GRC & Privacy: risk & compliance assessments (e.g., maturity, DPIA), compliance evidence, reporting; Standards & Regulation: NIS2, ISO 27001/2700x, CyFun, GDPR, AI Act awareness, ITIL/Prince2; Delivery: project/program management, independent execution, pre-sales (RFP/tenders); Stakeholders & Comms: client-facing consulting, stakeholder management (e.g., CISO/DPO/regulators), presenting; Ways of working: analytical/structured, hands-on, solution-oriented, team coordination; Languages: English + Dutch and/or French; Certifications: ISO 27001 (LI/LA), CISSP/CISA/CISM/CRISC (plus), ISO 42001 (nice to have)