Information Security Analyst – NIS2

Our client, a prominent organization in the environmental utility and infrastructure sector, is seeking a specialist to support the implementation of the NIS2 framework. The role focuses on second-line validation of security evidence and documentation to ensure organizational readiness for external audits.

• Assess the quality of documentation and implementation evidence provided by internal domains based on security guidance.
• Validate that provided evidence supports self-evaluation scores and is not based on assumptions.
• Provide structured feedback and concrete improvement points to domain owners.
• Build comprehensive audit dossiers and evidence registers for external verification.
• Interpret technical evidence including configuration exports, log files, tickets, and scan reports.
• Support the organization in achieving and maintaining required security maturity levels.

• You have 3+ years of experience in information security, compliance, or IT audit.
• You possess deep knowledge of security frameworks such as CyFun, ISO 27001, or NIST CSF.
• You bring experience in a second-line security role focusing on validation and oversight.
• You're able to analyze technical data like logs, vulnerability scans, and system configurations.
• You are native in Dutch.

Nice to Haves

• Experience with CyFun implementations specifically for essential organizations.
• Knowledge of English.

• Start date: ASAP
• Duration: 15 months (until 31/12/2027)
• Work regime: Part-time (3/5)
• Location: Aartselaar
• Working model: Hybrid
• Contract: open to both permanent employees and freelancers