GRC Information Security Officer

The role sits within the Governance, Risk & Compliance (GRC) team. The contractor will support key security governance processes, primarily risk management and exception management activities. The position is operational in nature but also offers opportunities to contribute to process improvements, automation initiatives, and maturity enhancement of the security governance framework.

Typical Day

• Conducting and supporting security risk assessments with stakeholders
• Following up on risk mitigation actions and process adherence
• Managing security exceptions and non-compliance tracking
• Guiding stakeholders through security governance processes
• Preparing reports, dashboards, and management reporting
• Participating in stakeholder meetings and internal operational meetings
• Identifying opportunities for process improvements and automation Requirements Years of Experience
• Candidates with up to 4-5 years of experience may be considered if they are motivated by operational work
• Ideal: 1-3 years of experience in Information Security or GRC-related activities Must Have
• Basic Information Security knowledge across multiple security domains
• Understanding of core IT concepts (network security, network segregation, etc.)
• Ability to perform risk assessments and interact with stakeholders
• Strong analytical and communication skills
• Ability to work independently and progressively take ownership of activities
• Strong Microsoft Office skills (Excel, PowerPoint, Outlook, Teams) Nice to Have
• Previous experience with Governance, Risk & Compliance (GRC) platforms
• Pharmaceutical industry experience
• Security-related certifications (e.g., ISO 27001) are appreciated but not a selection criterion
• French and/or Dutch language skills