Senior Security Consultant GRC
About the Role
Healthcare institutions, local governments, educational organizations, and housing corporations face a pressing challenge: demonstrating that their information security is truly compliant. Driven by regulations such as NIS2, BIO, and NEN 7510, robust security management is now mandatory. As a Senior Security Consultant GRC at an established IT service provider in Eindhoven (160+ colleagues), you will guide approximately 250 clients toward mature and measurable security practices.
In this role, you conduct risk analyses and security assessments, draft actionable policies, and steer clients through audits and certification processes. You act as a trusted advisor to executive boards, CISOs, and IT management. Because the organization also manages the underlying cloud, modern workplace, and network infrastructure, your strategic advice directly translates into technical execution with your engineering colleagues.
Furthermore, you play a pivotal role in expanding the GRC practice. You will help design methodologies, standardize frameworks, and refine new service offerings. This is an ideal position for an experienced security professional who wants to combine board-level consulting with shaping a fast-growing domain.
- Proven senior-level experience in information security and GRC within a consulting environment
- In-depth knowledge of frameworks and regulations such as ISO 27001, NIS2, BIO, NEN 7510, and GDPR
- Hands-on experience conducting risk analyses, security assessments, and leading audit processes
- Strong stakeholder management and advisory skills at board and executive level
- Ability to translate complex compliance requirements into actionable, practical policies
- Fluency in Dutch and English, both spoken and written
About Mellow & Jane
We are a specialized IT recruitment agency connecting top tech talent with innovative companies. Our personal approach ensures the perfect match for both candidates and employers.