Back to all jobs
Visible on IKONS todayNewPopular
BrusselsHybrid40 hours/week<3months
An HR specialist provides IT projects to various top clients in Flanders and Brussels. With 15 years of experience, they meet individual needs and offer room for growth and development. They are currently looking for a Chief Information Security Officer to work for one of their clients. This position can be filled with either a permanent contract or a freelance contract.
What you will do.
- Develop and operationalize the cybersecurity strategy and multi-year roadmap.
- Build and maintain the Information Security Management System (ISMS) and the governance framework.
- Lead the Security by Design program and integrate security into projects, processes, systems, and digital initiatives.
- Identify, analyze, and monitor cyber risks, including risk registers, treatment plans, and residual risks.
- Integrate cyber risk management into Enterprise Risk Management.
- Advise business and IT on cybersecurity, cloud, data, AI, and digital transformations.
- Establish and maintain security policy, standards, and guidelines.
- Guide audits, gap assessments, maturity assessments, and control assessments.
- Ensure compliance with ISO 27001, NIS2, GDPR, and relevant sectoral obligations.
- Evaluate penetration tests, risk analyses, and technical security assessments.
- Develop KPIs, KRIs, and reports for management, Audit Committee, and Board of Directors.
- Monitor security incidents, root-cause analyses, and structural improvement actions from the second line.
- Support Third-Party Risk Management and security assessments of critical suppliers.
- Build security awareness and an organization-wide security culture.
- Create support and stimulate collaboration between management, business, IT, and other stakeholders.
- Monitor the progress and effectiveness of the cybersecurity program and independently escalate material risks.
Profile
- At least 10 years of relevant experience in cybersecurity, information security, cyber risk management, or cybersecurity governance.
- Demonstrable experience as CISO, vCISO, or senior cybersecurity advisor.
- Experience in developing and managing multi-year cybersecurity and transformation programs.
- Thorough knowledge of ISO 27001, NIS2, GDPR, cyber risk management, and cybersecurity governance.
- Sufficient technical knowledge to substantively assess risk analyses, penetration tests, and security assessments.
- Broad knowledge of IAM, data protection, DevSecOps, detection and response, and Third-Party Risk Management.
- Experience with audits, maturity assessments, and monitoring improvement measures.
- Experience with reporting to management, Audit Committee, or Board of Directors.
- Strategic insight combined with a pragmatic, hands-on approach.
- Strong communication skills and the ability to translate technical risks into concrete business impact.
- Strong in stakeholder management, advising, persuasiveness, and creating support.
- Able to advise independently and critically from a second-line function, with respect for the ownership of business and IT.
- Willingness to develop analyses, concrete solutions, and deliverables independently.
- Added value: experience with digitalization, cloud transformation, data, and AI initiatives.
Practical aspects.
- A motivating salary package is developed, including an interesting extra-legal package with various benefits.
- A company car with a charging or fuel card is offered.
- Personal follow-up and contacts are central to achieving the desired career.
- Growth opportunities and challenges are offered, guided by a professional training and evolution policy.
- Flexibility is offered for a good work-life balance.
- Events are organized annually.
- Opportunities for training and events are also available for freelancers.
How to apply
View the full assignment text and application details once your tailored application is ready.
Order a tailored application to view the full assignment and application details.
More context, less searching.
You get enough context to judge whether this job is relevant. The full brief, client details and next steps stay available inside the app.