Back to all jobs
Visible on IKONS todayNewPopular
BrusselsHybridHours negotiable<3months
Develop and operationalize the cybersecurity strategy and multi-year roadmap for an organization.
- Build and maintain the Information Security Management System (ISMS) and the governance framework.
- Lead the Security by Design program and integrate security into projects, processes, systems, and digital initiatives.
- Identify, analyze, and follow up on cyber risks, including risk registers, treatment plans, and residual risks.
- Integrate cyber risk management into Enterprise Risk Management.
- Advise business and IT on cybersecurity, cloud, data, AI, and digital transformations.
- Establish and maintain security policies, standards, and guidelines.
- Guide audits, gap assessments, maturity assessments, and control assessments.
- Ensure compliance with ISO 27001, NIS2, GDPR, and relevant sectoral obligations.
- Evaluate penetration tests, risk analyses, and technical security assessments.
- Develop KPIs, KRIs, and reports for the management, Audit Committee, and Board of Directors.
- Follow up on security incidents, root-cause analyses, and structural improvement actions from the second line.
- Support Third-Party Risk Management and security assessments of critical suppliers.
- Build security awareness and an organization-wide security culture.
- Create support and foster collaboration between management, business, IT, and other stakeholders.
- Monitor the progress and effectiveness of the cybersecurity program and independently escalate material risks.
Profile
- At least 10 years of relevant experience in cybersecurity, information security, cyber risk management, or cybersecurity governance.
- Proven experience as CISO, vCISO, or senior cybersecurity advisor.
- Experience in developing and managing multi-year cybersecurity and transformation programs.
- Thorough knowledge of ISO 27001, NIS2, GDPR, cyber risk management, and cybersecurity governance.
- Sufficient technical knowledge to substantively assess risk analyses, penetration tests, and security assessments.
- Broad knowledge of IAM, data protection, DevSecOps, detection and response, and Third-Party Risk Management.
- Experience with audits, maturity assessments, and following up on improvement measures.
- Experience with reporting to management, Audit Committee, or Board of Directors.
- Strategic insight combined with a pragmatic, hands-on approach.
- Strong communication skills and the ability to translate technical risks into concrete business impact.
- Strong in stakeholder management, advising, persuasiveness, and building support.
- Ability to advise independently and critically from a second-line function, respecting the ownership of business and IT.
- Willingness to develop analyses, concrete solutions, and deliverables independently.
Preferences.
- Experience with digitalization, cloud transformation, data, and AI initiatives.
How to apply
View the full assignment text and application details once your tailored application is ready.
Order a tailored application to view the full assignment and application details.
More context, less searching.
You get enough context to judge whether this job is relevant. The full brief, client details and next steps stay available inside the app.