Expert Cybersecurity

What you will do

As Expert Cybersecurity you will take a central role in the further development, implementation and monitoring of cybersecurity and information security. You will ensure that risks are managed, security requirements are met and the organisation continues to grow in maturity.

Your responsibilities include:

• Managing and further developing the Information Security Management System (ISMS), including policies, processes, procedures, documentation and review cycles, and leading the trajectory towards ISO 27001 certification
• Identifying, analysing and monitoring cybersecurity risks, managing the risk register and reporting periodically to the relevant bodies
• Ensuring compliance with relevant standards and regulations, including ISO 27001, NIS2 and CyberFundamentals (CyFun), and preparing and supporting audits
• Managing the Statement of Applicability and audit documentation and ensuring the organisation remains audit-ready
• Maintaining the Incident Response Plan, coordinating security incidents and ensuring correct follow-up of reporting obligations and improvement actions
• Contributing to business continuity and disaster recovery initiatives, with particular attention to security aspects
• Assessing supplier and supply-chain risks and ensuring compliance with security requirements by critical partners
• Managing external security partners and monitoring the follow-up of vulnerability management, patch management, monitoring and identity & access management
• Strengthening security awareness through awareness-raising, training and campaigns
• Supporting management and leadership with clear reporting on KPIs, risks, incidents and the progress of cybersecurity initiatives

You will report directly to the ICT director and work closely with the Data Protection Officer. You will be the central point of contact for information security, collaborating with colleagues within ICT, external security partners and process owners throughout the organisation.

What we are looking for

We are looking for an experienced cybersecurity expert who feels at home in an organisation in full development. You combine strong technical expertise with a pragmatic approach and get energy from building and embedding cybersecurity within a complex organisational context.

Education and experience:

• A master's degree, preferably in an ICT-related or business-oriented field, or equivalent through relevant experience
• At least five years of demonstrable experience in information security, cybersecurity or ICT risk management
• Experience with risk management, audits, compliance and setting up or managing an ISMS

Technical knowledge:

• Thorough knowledge of information security frameworks and standards such as ISO 27001, NIS2 and CyberFundamentals (CyFun)
• Understanding of modern IT environments, including infrastructure, cloud, identity and security services
• Insight into security operations, vulnerability management, supplier management and incident management

Certifications (strong asset):

• CISSP, CISM, ISO 27001 Lead Implementer or ISO 27001 Lead Auditor

Personal skills:

• Analytically strong, structured working style and able to translate complex issues into feasible actions and advice
• Able to engage stakeholders at different levels and switch smoothly between operational teams, management and leadership
• Fluent communication in Dutch and good knowledge of English

Additional assets:

• Experience within the healthcare sector or with the protection of sensitive personal data
• Experience in raising awareness and guiding employees

The setting

This assignment runs for three months, starting as soon as possible and ending mid-December 2026. You will be joining at an important pivotal moment, as the organisation is investing significantly in cybersecurity over the coming years, with an ongoing NIS2 programme, approved budget, strong external partners and ISO 27001 certification as a goal for spring 2027.

The role is hybrid, with at least two days per week on-site (fixed days: Tuesday and Thursday). The location is in the Ghent region.

The working regime can be 4/5 or full-time.

You can join us for this assignment as a freelancer or as an employee of HumanInTech. Same role, same team. If you join as an employee, your employment continues beyond this assignment. When it ends, we’ll work together to find your next assignment.

Location: Ghent region, hybrid

Work address: Belgium

Employer / contracting party: HumanInTech

Applications close (Brussels time): October 16, 2026 at 2:00 AM

Engagement: