At Cronos Security, our mission is straightforward: safeguarding digital continuity and resilience for organisations across Europe.

We're looking for an experienced GRC consultant who combines strong cyber security expertise with a commercial mindset to join our mission. Someone who can identify opportunities, advise clients on their security challenges and turn recommendations into meaningful improvements.

From guiding organisations through their first cyber security assessments to implementing Information Security Management Systems (ISMS) and helping clients navigate regulations such as NIS2 and DORA, you'll be involved every step of the way.

You'll have the opportunity to help shape and strengthen our GRC services, bringing your expertise, ideas and initiative to a growing part of our business, all with the autonomy of a smaller team and the support of the wider Cronos ecosystem.

Your focus? Helping organisations move beyond compliance towards real cyber resilience. You'll combine hands-on GRC consulting with a client-facing, commercially minded approach. From the first conversation to the implementation of security improvements, you'll take ownership and help clients make progress.

• Turn conversations into opportunities: engage with potential clients, understand their security challenges and recognise where our expertise can make a difference. You know how to build trust and turn a good conversation into a valuable collaboration.

• Drive VLAIO cyber security projects: guide organisations through the initial conversations, conduct cyber security assessments and help them take concrete steps towards stronger security.

• Conduct security and compliance assessments: evaluate clients' security maturity, identify gaps and provide practical recommendations, including assessments against ISO 27001 and applicable regulatory requirements.

• Build and implement ISMS frameworks: help organisations establish, maintain and improve their Information Security Management Systems, aligned with their business needs.

• Navigate regulatory requirements: support clients in understanding and addressing NIS2 and DORA requirements, translating complex obligations into achievable actions.

• Turn advice into action: go beyond assessments and reports by implementing security policies, governance structures, risk management processes and other measures that strengthen clients' security maturity.

• Shape our GRC practice: bring your experience and ideas to the table, contribute to our methodologies and help further develop our internal GRC capabilities.

What makes this role different? You won't just deliver an assessment, hand over a report and move on to the next client. You'll have the opportunity to guide organisations through the entire journey: from identifying their challenges and defining a roadmap to implementing improvements and seeing the results of your work.

We're looking for someone who knows the GRC landscape, understands how organisations operate and feels equally comfortable discussing security challenges with management as working through the details of an ISMS.

Ideally, you bring:

• At least 5 years of experience in cyber security GRC with a strong background in advisory, assessments and implementations.

• Solid knowledge of ISO 27001, including hands-on experience conducting assessments and implementing or improving ISMS frameworks.

• A good understanding of NIS2 requirements and familiarity with DORA.

• Experience translating security and compliance requirements into practical policies, processes and improvement programmes.

• A commercial mindset. You enjoy engaging with clients, asking the right questions and identifying opportunities for further collaboration.

• Strong communication and stakeholder management skills, with the ability to engage both technical teams and business decision-makers.

• Fluency in Dutch and English. French is a plus but not a must.

• An independent, pragmatic approach. You take ownership, make things happen and know how to deliver value from day one.

Relevant certifications, such as ISO 27001 Lead Auditor, Lead Implementer, CISM or CISSP, are a plus as well.

Most importantly, you're someone who understands that compliance is not the finish line. You want to help organisations build security practices that actually work.

Why Cronos Security?

Simply put: the freedom to make an impact. You'll join a team of people who take cyber security seriously, without taking themselves too seriously.

As part of Cronos Groep, we combine an entrepreneurial way of working with access to an extensive network of cyber security experts, specialised companies and technologies.

What does that mean for you?

• Start on running client projects from day one, alongside building new opportunities with the autonomy to make decisions and drive improvements.

• You’re not limited to assessments or advisory work: you'll have the opportunity to follow projects from the first conversation through implementation, seeing the actual impact of your work.

• We value experience and initiative. You'll have the freedom to contribute your ideas, strengthen our internal expertise and play an active role in developing our GRC services.

• Collaborate with experienced cyber security specialists and access knowledge across the wider Cronos ecosystem.

• Short communication lines, approachable colleagues and a team that supports each other.

• A hybrid working environment with room to organise your work, depending on project and client needs. Our main office is located in Kontich, Antwerp.

• A competitive salary package. We're open to both payroll employees and freelancers, with compensation tailored to your experience and the collaboration model. Payroll employees can expect a full package (salary, benefits, meal vouchers, laptop, company car + card).

Ready to make a difference?

If you're an experienced GRC professional who enjoys working with clients, spotting opportunities and turning security challenges into real improvements, we'd like to meet you.