Senior Information Technology Program Manager

Role: Sr IT Security Program ManagerLocation: Brussels, BelgiumDuration: 5+ MonthsLanguages: French, Dutch and EnglishWork mode: HybridJob DescriptionKEY RESPONSIBILITIES:1. NIS2 Strategy & PlanningDevelop and maintain the NIS2 compliance strategic roadmapConduct gap analysis between current status and NIS2 requirementsDefine program priorities, milestones and deliverables Establish the budget and resources required for Program2. Governance & ManagementLead the NIS2 program from end to end (Agile/Waterfall)Coordinate the multidisciplinary teams (IT, Legal, Compliance, Business)Ensure regular reporting to the Executive Committee and the competent authorities Manage the risks, dependencies and problems of the program3. Compliance & Technical Implementation Oversee the implementation of cybersecurity measures required by NIS2Develop and review security policies, procedures and frameworks Ensure the integration of NIS2 requirements into existing processes (ISO 27001, GDPR)Coordinate with technical teams for the deployment of controls4. Risk Management & Incident ResponseEstablish and maintain the cybersecurity risk register Improve incident detection, response and recovery capabilities Define procedures for notifying authorities (CSIRT/CERT)Lead crisis exercises and continuity tests 5. Third-Party & Supply Chain SecurityAssess and manage cybersecurity risks of critical suppliers Implement due diligence processes for the supply chainEnsure vendor compliance with NIS2 requirements 6. Communication & TrainingRaise awareness and train stakeholders on NIS2 requirementsDevelop a cybersecurity culture within the organizationCommunicate with regulators and supervisory authorities DESIRED PROFILE:Minimum 7-10 years of experience in cybersecurity and program managementDemonstrated experience in implementing regulatory compliance programs (NIS2, GDPR, DORA, etc.)In-depth knowledge of security frameworks (ISO 27001/27002, NIST, CIS Controls)Experience in managing complex projects in regulated environmentsExcellent leadership, communication and stakeholder management skillsExperience in the Belgian or European public sector highly valuedAbility to work independently and manage multiple prioritiesDirect reporting to the CISO or executive managementCollaboration with multidisciplinary and international teamsRolesSenior IT Security Program ManagerSkillsAgileCybersecurity Program ManagementExecutive Stakeholder ManagementGDPR & EU Regulatory ComplianceIncident Response ManagementNIS2 Directive ImplementationRisk Management & AssessmentSecurity Governance & Policy DevelopmentThird-Party Risk ManagementWaterfallQuestionsDo you have direct experience implementing or managing an NIS2 compliance program?Do you have a valid CISSP or CISM certification?Are you available to work on-site in Brussels at least 3 days a week?Are you familiar with other European cybersecurity regulations (GDPR, DORA, Cyber Resilience Act)?Possédez-vous la certification CISA (Certified Information Systems Auditor)?Do you have PMP or PRINCE2 certification?Describe your real-world experience in implementing NIS2 or a similar regulatory compliance program. What were the main challenges you faced and how did you overcome them?How would you structure an NIS2 roadmap for an organization that is just starting its compliance journey? What would be your priorities in the first 3 months?Can you describe a situation where you had to manage multiple stakeholders with divergent priorities as part of a cybersecurity program? How did you deal with this situation?What is your approach to assessing and managing third-party risk management in the context of NIS2?How do you ensure the commitment and awareness of executive management and operational teams to the challenges of cybersecurity and NIS2 compliance?Do you have experience in coordinating with regulatory authorities (CSIRT, CERT, national authorities)? If so, please describe this experience.What tools and methodologies do you use to manage and monitor a complex cybersecurity program (KPIs, dashboards, project management frameworks)?Have you ever worked in the public sector or with government entities in Belgium or Europe?