Skip to content
MVPeopleGroup
GRC & Compliance

Managing Consultant – ISO 27001 & Compliance

Utrecht, UTPermanent (MVPermanent)HybridLeadoverige

About the assignment

A leading organisation is seeking an experienced managing consultant to guide their ISO 27001 certification journey and broader compliance programme. You combine deep knowledge of information security standards with the ability to translate technical requirements into business strategy.

Your impact spans governance structure design, control frameworks, audit readiness, and stakeholder alignment. You work at board level and with operational teams to embed security and compliance into organisational DNA.

Your responsibilities

  • Assess current security posture and design ISO 27001 roadmaps tailored to business objectives
  • Advise leadership on governance structures, risk appetite, and compliance strategy
  • Design and implement control frameworks aligned with ISO 27001, NIS2, and sector-specific requirements
  • Lead audit preparation and support certification bodies through the assessment process
  • Mentor internal teams on compliance practices and build sustainable compliance cultures
  • Develop policies, procedures, and documentation that bridge security and business requirements
  • Monitor regulatory changes and advise on impact to existing control environments

Tech Stack & Tools

Platforms & Tooling

ServiceNow GRCArcherOneTrust

Frameworks & Standards

ISO 27001NIS2ISO 27002COBITNIST CSF

Methodologies

Risk assessment (ISO 31000)Control designCompliance auditingStakeholder management

Certifications (preferred)

CISACISMCRISCISO 27001 Lead Auditor

Must-haves

  • Proven track record delivering ISO 27001 certifications for mid-to-large organisations
  • Deep understanding of ISO 27001, ISO 27002, and related information security standards
  • Experience designing and implementing GRC programmes from strategy to operational embedding
  • Ability to communicate complex compliance concepts to both technical and non-technical stakeholders
  • Strong project management and stakeholder engagement skills

Nice-to-haves

  • Experience with NIS2, DORA, or other European regulatory frameworks
  • Familiarity with GRC platforms such as ServiceNow, Archer, or OneTrust
  • Background in audit, risk, or internal control functions
  • Experience in regulated sectors (finance, energy, healthcare)

What we offer

  • Strategic advisory role with direct board-level visibility and impact
  • Work across diverse industries and complex organisational structures
  • Opportunities to shape security culture and governance at scale
  • Continuous learning through exposure to emerging compliance requirements
  • Flexible engagement models supporting both full-time and project-based assignments
  • Personal guidance from a dedicated MVPeople consultant who knows your niche

The process

1

Introduction

Phone call with your MVPeople consultant (within 24 hours)

2

Match & Brief

We discuss the assignment in detail and prepare you

3

Client meeting

Introduction to the client

4

Start

Contracting and onboarding

Details

Type

Permanent (MVPermanent)

Location

Utrecht, UT

Work model

Hybrid

Level

Lead

Industry

overige

Market indication

€95,000 - €130,000 per year

Posted

6 November 2026

Job ID

59976



Contact

MVPeople Group

cv@mvpeoplegroup.com
Apply nowMore information
Apply now