GRC Implementation Consultant & Risk Officer bij CERRIX

C

GRC Implementation Consultant & Risk Officer

CERRIX

The Hague, South Holland, Netherlands

Hybride

Medior

39 dagen geleden geplaatst

Bekijk bedrijfsprofiel

Vacaturesamenvatting

Join CERRIX as a GRC Implementation Consultant & Risk Officer, where you will balance client-facing consulting with internal risk management. Help clients optimize governance, risk, and compliance while safeguarding our IT security and leading compliance certifications.

Vereiste vaardigheden

Requirements Analysis

advise

Compliance

Framework Design

REST

Validation

Mental Health

Analytical Skills

analyses

Documentation

implementation

configuration

data migration

Security Management

planning

Data Mapping

Growth

Customer Success

Learning and Development

workshops

GRC

Teams

ISMS

Artificial Intelligence (AI)

Governance

Sports Activities

Communication Skills

Bootstrap (Framework)

Security Policies

integrations

COBIT

Dashboards

Transformation

NIST

Dutch

English

Coordinating

Assurance

Advisory

SAAS

Support

Certification

Contact

SOC 2

Benchmarking

Business Requirements

Guidance

Audit Processes

DORA

Clear

Training

Serving

Proactive

COSO

Control Frameworks

Legacy Systems

IRM

Information Security

Well-being

Benefits

Spreadsheets

ISO 27001

ISAE 3402

workflows

As a GRC Implementation Consultant & Risk Officer at CERRIX, you will split your week between two complementary roles. For three days, you will work directly with clients as a GRC Implementation Consultant, translating their governance, risk, and compliance needs into a well-configured CERRIX platform. The remaining two days will be spent in an internal role as Risk Officer, ensuring our IT security and leading compliance certifications that support our growth.

The Role

In your consulting capacity, you will lead implementation projects from start to finish, overseeing everything from kickoff and requirements analysis to configuration, data migration, testing, training, and go-live. You will act as a trusted risk advisory partner, assisting clients in strengthening their risk and control frameworks, benchmarking GRC maturity against best practices, and translating regulations (e.g., DORA, ISO 27001, DNB/AFM guidance) into actionable controls.

As a Risk Officer, you will manage our existing compliance and IT assurance certifications (ISO 27001, ISAE 3402) and spearhead our transition to SOC 2 Type II, serving as the key liaison between internal stakeholders and external auditors. This role places you at the heart of an exciting phase of growth and digital transformation. If you seek to develop your career with a dynamic and forward-thinking organization, this opportunity is for you.

Responsibilities

As a GRC Implementation Consultant (3 days per week):

As a Risk Officer (2 days per week):

•

Conduct discovery workshops to gather client GRC requirements (risk management, controls, audit, compliance) and translate them into CERRIX configurations.

•

Configure and set up the CERRIX platform, including workflows, risk frameworks, control libraries, dashboards, and integrations.

•

Advise clients on risk and control framework design, benchmarking their approach against leading practices and relevant regulations (e.g., DORA, ISO 27001, DNB/AFM).

•

Own the implementation project plan, timeline, and milestones, collaborating closely with the project manager and client stakeholders.

•

Support data migration and validation from legacy systems or spreadsheets into CERRIX.

•

Deliver training for end-users and administrators, producing clear configuration and process documentation.

•

Utilize AI to optimize each step of the implementation, enhancing configuration, data mapping, testing, and documentation for faster client go-lives.

•

Serve as the primary contact for clients during implementation, managing expectations and addressing escalations.

•

Provide client insights and recurring configuration needs to Product and Customer Success teams to enhance CERRIX.

•

Manage and maintain our Information Security Management System (ISMS) in accordance with ISO 27001.

•

Lead the transformation and successful audit for SOC 2 Type II (transitioning from ISAE 3402), coordinating cross-functional readiness.

•

Conduct risk assessments, gap analyses, and mitigation planning, including maintaining and updating a risk register.

•

Act as the point of contact for external auditors and compliance officers during audit processes.

•

Advise management on risk exposure, audit findings, and necessary corrective actions.

•

Develop and update risk and security policies, awareness programs, and training initiatives.

Nog steeds zelf aan het zoeken?

Laat het werk aan ons over.

TotaMatch werkt voor jou

Wij scannen dagelijks duizenden vacatures en laten het je weten als er een match is. Zelf zoeken is niet nodig.

Anoniem, veilig en gratis

Je profiel blijft anoniem. Je werkgever ziet het niet. Jij kiest wanneer je zichtbaar wordt.

Binnen 3 minuten klaar

Beantwoord een paar vragen en maak in enkele minuten je profiel. Zonder verplichtingen.

Over TotaMatch

TotaMatch helpt professionals werk te vinden dat echt past bij hun werkgeluk. Wij geloven dat werk meer is dan alleen een inkomen. Het is een bron van voldoening, groei en trots. In plaats van eindeloos te scrollen door vacaturesites, werkt TotaMatch voor jou. Ons platform analyseert continu duizenden kansen en identificeert rollen die aansluiten bij wat voor jou echt belangrijk is. Jij kunt je focussen op je werk en de mensen om je heen. Wij zorgen ervoor dat je nooit een betere kans mist.