About the mission
We are looking for a Senior Information Security & NIS2 Compliance Consultant to help organizations achieve compliance with NIS2 obligations. The role involves supporting the implementation of information security policies and preparing for audits and inspections. Candidates should have significant experience in information security and project management.
Read the full description
Description
MissionAccompany an organization towards compliance with NIS2 obligations (law of April 26, 2024) by supporting the implementation of an information security policy and the associated technical and organizational measures. Work closely with the organization and its suppliers to develop, harmonize, and implement these policies.
Also assist the organization in preparing for audits, inspections, and control activities, so that it can demonstrate compliance with applicable NIS2 obligations. Monitor the progress of work and report to the relevant stakeholders.
Experience
At least 10 years of experience in complex enterprise IT environments.
At least 5 years of experience in information security, in an operational or organizational context.
Proven experience in implementing and deploying an Information Security Management System (ISMS), preferably according to ISO/IEC 27001.
Experience in project management, stakeholder management, and progress reporting.
Experience in preparing, assisting, and following up on audits, inspections, and control procedures.
Experience in the public sector or social security is a significant asset.
Profile
In-depth knowledge of the NIS2 directive and its transposition into Belgian law, the CyberFundamentals framework (CCB), and related information security frameworks.
Good understanding of technical and organizational security measures and their practical application within organizations.
Ability to balance cybersecurity risks with operational objectives and to communicate this clearly and convincingly.
Ability to demonstrate compliance (evidence, documentation) to auditors and regulatory authorities.
Pragmatic approach, able to translate theoretical principles into feasible and effective measures.
Autonomous, with strong expertise, leadership, and persuasive skills.
Excellent communication skills and the ability to work with various internal and external stakeholders.
What you'll do
- Accompany an organization towards compliance with NIS2 obligations by supporting the implementation of an information security policy and associated measures.
- Work closely with the organization and its suppliers to develop, harmonize, and implement policies.
- Assist the organization in preparing for audits, inspections, and control activities.
- Monitor the progress of work and report to relevant stakeholders.
What we're looking for
- At least 10 years of experience in complex enterprise IT environments.
- At least 5 years of experience in information security, in an operational or organizational context.
- Proven experience in implementing and deploying an Information Security Management System (ISMS), preferably according to ISO/IEC 27001.
- Experience in project management, stakeholder management, and progress reporting.
- Experience in preparing, assisting, and following up on audits, inspections, and control procedures.
- Experience in the public sector or social security is a significant asset.
Skills
- Complex enterprise IT environments
- Information security and compliance projects
- Information security systems
- NIS2
- Project management (Agile, Prince2)