Security Consultant

Harvey Nash

Mechelen, Belgium

16 days ago

Prepare application

Role details

Contract type

Permanent contract

Employment type

Full-time (> 32 hours)

Experience level

Experienced

Experience required

3 years minimum

Working hours

Regular working hours

Languages

Dutch, English

Job source

Cyber Security Information Security Management System CIS Benchmarks

Develop, align, and maintain the information security policy for the Belgian entity in line with the group’s policy (ISO 2700x, NIST, CIS Controls, CyberFundamentals).
Coordinate the NIS2 implementation: risk analyses, security measures, reporting to management and the group, and follow-up of remediation plans.
Establish and support an ISMS (Information Security Management System) or integrate it into existing management systems.
Act as the point of contact for audits, internal controls, and NIS2 oversight for the Belgian entity.
Ensure that central security standards from the group are practically applicable within the Belgian context; provide feedback on local needs to the Group Security organization.
Develop and support NIS2 awareness initiatives for employees.

3-5 years of experience in information security and cybersecurity governance.
Knowledge of relevant frameworks: ISO 27001/27002, NIST CSF, CIS Controls, CyberFundamentals, ISO 31000, GDPR; knowledge of NIS2 is required.
Experience in setting up or supporting an ISMS and preparing for audits.
Strong communication skills: able to explain complex security topics clearly to non-technical stakeholders and act as a bridge between different parties.
Experience in a group/corporate structure is a plus, as is experience in the energy sector.
Languages: fluent Dutch (required) and good English skills for communication with the group.