AISB-906 Cybersecurity GRC Manager (ISO 27001 / NIS2) – Hybrid

ABAKUS-IT-SOLUTIONS is looking for an experienced Cybersecurity GRC Manager to support strategic digital transformation and security initiatives within a critical infrastructure environment.

You will join a cybersecurity team and work closely with the CISO, contributing to governance, risk, and compliance activities across multiple organizations.

Project Details

• Work model: Hybrid
• Duration: Long-term mission (renewable)
• Language: French (mandatory), English (nice to have)

Your Mission

You will support the implementation and continuous improvement of information security governance frameworks, focusing on ISO 27001 and NIS2 compliance within a multi-entity environment.

You will act as a key GRC expert, bridging governance strategy and operational execution while interacting with internal teams and external stakeholders.

Key Responsibilities

• Lead and maintain the Information Security Management System (ISMS):
  • Policies, procedures, risk treatment plans
• Support clients in achieving ISO 27001 certification (gap analysis to audit)
• Prepare and coordinate internal and external audits, including follow-up on non-conformities
• Contribute to NIS2 compliance implementation across regulated entities
• Conduct and manage risk assessments (ISO 27005 or equivalent)
• Use and manage GRC tools (e.g. CISO Assistant or equivalent platforms)
• Coordinate with stakeholders (CISO, clients, providers) to ensure alignment and compliance
• Deliver structured reporting and documentation for governance bodies

Your Profile

Required

• 3–5+ years of experience in GRC, information security, or IT compliance
• Proven experience with ISO 27001 implementation or certification processes
• Strong understanding of NIS2 requirements
• Experience in risk management methodologies
• Excellent documentation and communication skills
• Ability to work autonomously in a multi-client environment
• Fluent French (written and spoken)

Nice to Have

• ISO 27001 Lead Implementer certification
• Experience with GRC tools (ServiceNow GRC, OneTrust, Archer, etc.)
• Knowledge of RGPD / GDPR
• Experience in regulated sectors (energy, water, public sector, finance, etc.)
• Understanding of IT/security architectures and infrastructure concepts
• Exposure to frameworks such as CIS Controls, IEC 62443

Soft Skills

• Strong analytical and structured mindset
• Excellent stakeholder management and communication skills
• Ability to influence without direct authority
• Pedagogical approach to security and compliance topics
• Adaptability in complex, multi-organization environments
• Results-oriented with strong ownership

What ABAKUS-IT-SOLUTIONS Offers

• Strategic missions in critical infrastructure sectors
• Exposure to high-impact cybersecurity and compliance programs
• Collaborative environment with C-level stakeholders
• Long-term opportunity with flexible working conditions
• Dedicated support from ABAKUS-IT-SOLUTIONS