Position

The Federal Pensions Service is seeking an experienced Project Leader Security & Information Security for the realization and follow-up of security projects within the broader NIS2 security program, with the objective of bringing the organization in time to the required NIS2 Essentials compliance level by April 2027.

As IT Project Leader, you ensure the realization of ICT security projects, taking into account the planning of the security program and the required quality.

Specifically, this includes the following tasks:

• Project management of Security initiatives: Ensure the successful implementation of ICT security projects with a focus on planning, budget, quality, and risk management.
• You manage and ensure the follow-up of the realization of the projects, taking into account the planning, budget, and required quality (drawing up the detailed planning, regular monitoring regarding deadlines, budget, and quality, reporting on project progress and identified issues, communication between parties involved in the project, risk management, etc.).
• You ensure the “service transition”; you lead the transition process of the delivered security solutions to operational status by preparing an operational plan, support, processes, and procedures.
• You are responsible for the timely delivery, centralization, and quality control of the required evidence and documentation, so that the realization of the security projects is demonstrable in the context of compliance, audit readiness, and reporting within the security program.
• You also organize the change management process, the communication plan, and support the development and evolution of the delivered project within the organization.
• You take on a motivating, advisory, and facilitating role towards management and business units and work closely with them.
• Furthermore, you ensure good people management by stimulating, coordinating, and motivating the involved employees during the realization of the projects.

Technical competencies

• You have at least 8 years of project management experience, including requirements gathering, planning (WBS, multiple dependencies), and cost, time, and quality management (project KPIs), preferably supported by a certification.
• You have previously documented infrastructure solutions that were designed by architects and analysts and implemented by operational staff.
• Experience in the field of security project management, with an active role as project leader, engineer, or another function in at least three domains of IT security, such as network security, endpoint security, IAM, Central Logging, DLP, DRP, PIM and PAM, Threat Modelling, DB-anonymization, secure development, is required.
• You have certification in or demonstrable experience with PRINCE2 or other project management frameworks.
• You have some experience or certification in NIS2, ISO27001, NIST, or another security framework.
• You have strong technological leadership skills and attach great importance to coaching, knowing how to motivate and coordinate the teams involved in the projects.
• You have excellent communication skills and can support these with visualization techniques.

Generic competencies

• You have strong organizational and coordinating skills and work pragmatically, structured, and result-oriented.
• You can follow up technically complex security projects, monitor dependencies, and timely identify bottlenecks.
• You communicate clearly with stakeholders at various levels and support change through clear agreements, visual reporting, and targeted coordination.
• You take on a motivating, advisory, and facilitating role towards management, teams, and project teams.
• You know how to coordinate and motivate involved employees during the realization of the projects.
• Dutch- or French-speaking and a good passive knowledge of the other national language.

Selection

In your CV, describe in a maximum of 20 lines which core components you believe must be present at a minimum in an enterprise security program. Briefly explain why these components are necessary and how they contribute to an integrated approach to risk, compliance, operational security, and organization-wide follow-up.

The place of employment is Brussels. We offer the possibility to telework part-time.