> Markdown version of [/jobs/ext/18548-chief-information-security-officer](https://www.wearedevelopers.com/jobs/ext/18548-chief-information-security-officer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Chief Information Security Officer - **Company:** Deloitte - **Location:** Zaventem, Belgium - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Artificial Intelligence, Cyber Security, Systems Development Life Cycle, Security Information and Event Management, Information Security Management System, Delivery Pipeline, Software Security, Mttr, Cybercrime, Devsecops - **Published:** May 18, 2026 - **Apply:** https://be.indeed.com/viewjob?jk=36fed5fea8d5e18d ## About the Role Do you have experience in Leadership?, * 10+ years in information security with at least 5 in a senior leadership role (CISO, Deputy CISO, Head of Cyber). * Proven experience owning security as an end-to-end service - strategy through to delivery - in a complex enterprise context. * Strong command of regulatory requirements: NIS2, GDPR, DORA, EU AI Act, ISO 27001. * The ability to communicate security risk to ExCo and board-level audiences with confidence and clarity. * A leadership style that builds trust, develops talent, and makes security a partner to the business - not a barrier. * Strong people leadership skills, with experience managing multi-disciplinary security teams and third-party security providers. * Experience with cyber incident response, crisis management, and post-incident review at enterprise scale. You'll stand out if you also have: * CISSP, CISM, CISA, or equivalent professional certification. * Experience in professional services, financial services, or another regulated sector. * A track record of embedding DevSecOps and securing cloud-native delivery pipelines. * French and/or Dutch language capability. ## Description Cyber threats don't stand still. Neither do we. Deloitte Belgium is looking for a CISO who can lead from the front, protecting a 5,500-person firm while shaping the security strategy that keeps us ahead of the curve. This is a rare opportunity to own security end-to-end, not just as a technical function, but as a firm-wide service that directly enables the business to operate with confidence. As CISO, you'll be the firm's most senior security leader, reporting directly to the CIO and accountable for the security posture, risk management, and compliance obligations of Deloitte Belgium. You'll lead three specialist teams: our Governance, Risk & Compliance (GRC) function, our Security Operations Centre (SOC), and our Application Compliance Assessment team. This isn't a purely technical role, nor is it purely strategic. It's both. You'll need to be equally comfortable presenting cyber risk to the Executive Committee and reviewing SOC playbooks with your incident response team, with everything in between. As CISO, you will hold full service ownership of our Security, Governance & Risk domain - accountable for outcomes, not just processes. Security Operations: * Lead our SOC, SIEM, ISMS, and incident response capability. Drive MTTD and MTTR improvements and ensure the firm is always one step ahead of emerging threats. Risk & Compliance * Own our GRC framework, regulatory compliance (NIS2, GDPR, DORA, EU AI Act, Internal Deloitte controls), and audit management - reporting directly to ExCo on our risk posture. * Own the firm's security risk register and represent cyber risk at ExCo and governance forums Application Security * Ensure our Secure SDLC framework is embedded across all development activity. Make security a shared engineering value - not a late-stage gate. Strategy & Leadership * Set and execute the firm's information security strategy from policy to operations to culture.. * Manage team capacity, performance, skills development, and succession planning across the security function, with teams covering GRC, SOC, and application compliance. * Oversee the use of managed security service providers and third-party partners, ensuring performance and value. * Act as the CIO's trusted advisor - and the business's - on all things security., * Flexible work arrangements for all and initiatives supported by Parents & Caregivers @Deloitte * Wellbeing tips and activities powered by Energise@Deloitte * Topped off with other health benefits and insurance opportunities Empowering our employees with flexible work arrangements remains essential in today's reality: * Hybrid workplace: combination of home office and on-site (+10 offices in Belgium or client's premises). * Part-time employment: all our jobs are open to full-time or part-time work under a 90% or 80% regime. ## Related Videos - [DevSecOps culture](https://www.wearedevelopers.com/videos/783-devsecops-culture) - [What Developers Get Wrong About Application Quality](https://www.wearedevelopers.com/videos/233-what-developers-get-wrong-about-application-quality) - [Fighting the Next Wave of Cybercrime](https://www.wearedevelopers.com/videos/100331-fighting-the-next-wave-of-cybercrime) - [DevSecOps: Injecting Security into Mobile CI/CD Pipelines](https://www.wearedevelopers.com/videos/273-devsecops-injecting-security-into-mobile-ci-cd-pipelines) - [DevSecOps: Security in DevOps](https://www.wearedevelopers.com/videos/36-devsecops-security-in-devops) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) ## Related Articles - [Best Companies in the Netherlands: Top 25 Companies in 2023 ](https://www.wearedevelopers.com/magazine/193-best-companies-in-the-netherlands-top-25-companies-in-2023) - [Dev Digest 191: Malware interviews, EU ❤️ Open Source and Skilled Agents](https://www.wearedevelopers.com/magazine/645-dev-digest-191-malware-interviews-eu-open-source-and-skilled-agents) - [Best Companies to Work For in Paris: Top 25 Companies in 2023 ](https://www.wearedevelopers.com/magazine/190-best-companies-to-work-for-in-paris-top-25-companies-in-2023) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [What’s the Difference between a Junior, Mid, and Senior Developer?](https://www.wearedevelopers.com/magazine/238-what-s-the-difference-between-a-junior-mid-and-senior-developer) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)