Arnaud Defruit
Senior GRC Consultant | ISO & EU Regulation
Salaire / Taux journalier
Louvain, Belgique
Freelance
Expertises
Langues
À propos
Introduction
GRC Expert with 3+ years specializing in IT audit, ISO/ISAE attestation, and EU regulation compliance (NIS2, DORA, AI Act). Led SOC and ISO audits at EY, now managing Third-Party Security at AXA with proven expertise in ISMS implementation and risk assessments. I deliver end-to-end security governance solutions, ensuring regulatory compliance while strengthening organizational resilience against emerging cyber threats.
Expérience de travail
AXA Insurance
sept. 2024 - Présent
2 ans 2 mois
Business Security (Third-Party Security Manager)
sept. 2024 - Présent
2 ans 2 mois
– Perform security maturity & risk assessments – Define & implement ISMS – Identify, analyze & deploy security processes & controls – Measure & report organizational security posture against key risks & threats – Advise & support CISO in operational & transformational security initiatives – Contribute to TPRM tooling – Team management
Business Security (Third-Party Security Expert)
– Contribute to security, strategy & roadmap development – Support governance, risk & compliance initiatives – Deliver end-to-end security support services (awareness, assurance, incident management) – Advise on security integration with business & IT programs – Embed new security capabilities aligned with business criticality (CIA)
EY
nov. 2021 - sept. 2024
2 ans 11 mois
Diegem, Belgium
Technology Risk Consultant, Sr (Focus: IT Audit & Attestation)
janv. 2023 - sept. 2024
1 an 9 mois
Diegem, Belgium
– Lead Soc, ISAE, ISO Audits – Manage full engagement lifecycle – Ensure compliance with market standards – Coach teams and build client relationships (incl. trainings at client side) – Strengthen governance & trust (Al Act, Dora, NIS2)
Technology Risk Consultant, Jr (Focus : IT Audit & Data Analytics)
nov. 2021 - déc. 2022
1 an 2 mois
Diegem, Belgium
– Assess IT risks and controls (ITGCS) – Review complex system configurations – Hands on experience with ITIL, COBIT, NIST – Deliver actionable business insights & recommendations – Hands on experience in data analytics (data extraction, transformation)
Formation
UCL
Certificate, Data Analysis
2025 - 2026
1 an 1 mois
ICHEC
Certificate, Digital Marketing
2023 - 2024
1 an 1 mois
ICHEC
Bachelor & Master Degree, Business Administration
2014 - 2021
7 ans 1 mois
Licences et certifications
ITIL v4
Délivré le : –
Certified in Cybersecurity
Délivré le : –
ISO27001:2022 Lead Auditor
Délivré le : –
ISO27001:2022 Lead Implementer
Délivré le : –
DORA Lead Manager
Délivré le : –