Security Architect

Freelance Opportunity: Enterprise Security Architect (GRC Focus)

We are partnering with a leading organisation in Belgium seeking an experienced Enterprise Security Architect with a strong focus on Governance, Risk, and Compliance (GRC) to join on a freelance basis. This role is ideal for professionals who combine deep technical understanding with a strategic view on enterprise security governance, regulatory compliance, and risk mitigation.

Location
Belgium – Hybrid (2–3 days onsite, rest remote)

Start Date
ASAP or negotiable

Mission Duration
12-months (extensions likely based on performance and business needs)

About the Role
As an Enterprise Security Architect, your primary focus will be to align the security architecture with the organisation’s risk appetite, regulatory obligations, and compliance frameworks. You will help define and implement security controls, governance structures, and architectural standards that enable secure and compliant operations across multiple business domains.

Key Responsibilities

• Develop and maintain a security architecture framework aligned with GRC principles.
• Translate regulatory and compliance requirements (e.g. ISO 27001, NIS2, GDPR) into technical and procedural controls.
• Define and enforce security governance policies and ensure alignment across IT and business units.
• Conduct risk assessments and define appropriate mitigation strategies.
• Collaborate with stakeholders to ensure GRC integration across cloud, infrastructure, and application layers.
• Support audits, internal reviews, and third-party risk assessments.
• Provide strategic security input into large digital transformation and compliance-driven projects.
• Engage with CISO, Compliance, Legal, and Audit functions to ensure policy and architecture alignment.

Requirements

• Proven experience as a Security Architect or GRC-focused security consultant in a complex enterprise setting.
• Strong understanding of security frameworks and standards (TOGAF, SABSA, ISO 27001, NIST, COBIT).
• Hands-on experience in implementing GRC controls in enterprise IT and cloud environments (Azure, AWS, GCP).
• Solid grasp of European regulatory requirements including GDPR, NIS2, and sector-specific mandates.
• Strong communication and stakeholder management skills across technical and non-technical audiences.
• Fluent in English; French or Dutch is a significant advantage.
• Able to work regularly from Belgium (hybrid model).

What’s on Offer

• A long term freelance role focused on shaping the organisation’s GRC posture.
• Influence over key architecture and compliance strategies at the enterprise level.
• Work within a high impact environment, collaborating with senior stakeholders.

Please share your CV or contact us directly to learn more about this opportunity.