Information Security Officer

At BrightAnalytics, you take the lead on our Information Security Management System (ISMS), acting as the ultimate authority on our security governance. We are a team of high-end professionals in a high-paced environment. We focus on results, we learn from the best, and we grow with impact.

Key Performance Areas

ISMS Implementation

• Take end-to-end responsibility to plan, evaluate, and continuously improve our information security services and ISO 27001 certification.
• Guarantee strict compliance with European data protection legislation across our entire platform.
• Organize steering committees with leadership to align security strategy with our high-paced organizational growth.
• Operate with a strict risk management mindset.

Application Security & Technical Collaboration

• Cooperate with our Security Champions.
• Oversee vulnerability management.
• Drive application and infrastructure pentesting initiatives to proactively expose and neutralize threats.
• Set up and participate actively in exercises to prepare the organization for real-world cyber attacks.

Incident Response

• Collaborate directly with technical teams to resolve vulnerabilities and update security processes swiftly.
• Report on security incidents with absolute clarity, delivering straight-to-the-point recommendations for remediation.
• Investigate and initiate small-scale improvements to internal tooling without waiting for a directive.

Client Trust & Audit Execution

• Work seamlessly with Vanta to maintain a comprehensive corpus of evidences on Security and Privacy.
• Act as the security authority during client contact, directly responding to compliance and security questionnaires.
• Prepare rigorously for our internal and external security audits.

Legal & Compliance

• Take full ownership of our legal frameworks, staying relentlessly up to date with evolving security laws and international regulations.
• Execute strict license management, driving the follow-up and final approval processes.
• Assume full responsibility and act as our dedicated Data Protection Officer (DPO).
• Apply your knowledge of NIS2, DORA, CRA, and the EU AI Act to future-proof our operational resilience.

What do you bring?

• A Bachelor’s or Master’s degree in IT or Computer Science, backed by proven experience in ISMS and security frameworks.
• In possession of a CISO certificate is an added value
• Deep knowledge of AI to critically evaluate both its security risks and operational advantages within our environment.
• "Not my job" is not in our vocabulary, autonomous execution and extra-role behavior are the baseline.
• You function highly focussed under pressure and can handle critical situations
• Thriving in our hub at least 4 days a week, because proximity is power and accelerates growth.

What can you expect?

• A key role in one of the fastest-growing fintech companies in Belgium
• We are a financially healthy and ISO-certified scale-up with strong international growth ambitions
• An open and entrepreneurial culture where personal initiative is valued
• Being part of a team that highly prizes entrepreneurship
• On-the-job coaching and weekly training to develop unique skills
• No less than 20 statutory + 12 extra vacation days
• Flexible working hours: start between 7:30 and 9:30 AM and finish between 4:30 and 6:30 PM.
• Company car
• Meal vouchers of €10 per working day
• Eco-vouchers
• Hospitalization insurance
• Alan Health Benefits (your comprehensive supplementary health insurance)
• Friday after-work drinks, legendary team-building events, and an annual weekend trip with the entire BrightAnalytics team