Assignment

Guiding an organization towards compliance with the NIS2 obligations (NIS2 law of April 26, 2024) by supporting the implementation of an information security policy and the associated technical and organizational measures. The consultant works closely with the organization and its suppliers to develop, align, and effectively implement the policies.

In addition, the consultant guides the organization in preparing for audits, inspections, and supervisory activities, ensuring that it can demonstrate compliance with the applicable NIS2 obligations. He/she monitors progress and reports on this to the relevant stakeholders.

Experience

• At least 10 years of experience in complex IT environments at the enterprise level.
• At least 5 years of experience in information security, in an operational or organizational context.
• Demonstrable experience with the implementation and rollout of an Information Security Management System (ISMS), preferably according to ISO/IEC 27001.
• Experience with project management, stakeholder management, and progress reporting.
• Experience with preparing, guiding, and following up on audits, inspections, and supervisory processes.
• Experience within government or social security is a strong asset.

Profile

• Thorough knowledge of the NIS2 directive and its Belgian transposition, the CyberFundamentals framework (CCB), and related information security frameworks.
• Good understanding of technical and organizational security measures and their practical application within organizations.
• Ability to weigh cybersecurity risks against operational objectives and to communicate about this clearly and convincingly.
• Ability to demonstrate compliance (evidence, documentation) to auditors and supervisors.
• Pragmatic approach, translating theoretical principles into feasible and effective measures.
• Independent, with strong expertise, leadership, and persuasiveness.
• Strong communication skills and the ability to collaborate with a variety of internal and external stakeholders.