Senior Security Compliance Officer

Il y a 2 jours

Brussel Hoofdstad, Belgique Sloka IT Solutions Temps plein 80 000 € - 110 000 € Contrat

Job Title: Senior Security Compliance Officer

Duration - Minimum of a year with possible extension

Workplace type - Hybrid

Experience: 6+ Years

Context:

  • As part of strengthening its cybersecurity governance and complying with several regulatory and normative requirements, STIB is looking for a Security Compliance Consultant .
  • The consultant will work within the cybersecurity program to build, maintain, and develop the compliance framework to meet the requirements of several regulatory and normative frameworks, including:
  • NIS2
  • PCI DSS
  • Cyber Resilience Act (CRA)
  • Any other regulatory or normative requirements applicable to the organization
  • The mission is primarily focused on building the compliance framework , formalizing requirements, and defining controls. The consultant will not be responsible for the operational implementation of the controls, which will remain the responsibility of the relevant business and IT teams.
  • The consultant will be responsible for translating regulatory, normative and cybersecurity requirements into a coherent, measurable, auditable and sustainable compliance framework.
  • In this capacity, he will ensure the definition and maintenance of control frameworks, assessment methodologies, evidence requirements and associated reporting mechanisms.

Main responsibilities:

  • Construction and maintenance of control repositories
  • Analyze the applicable regulatory and normative requirements.
  • Translate these requirements into concrete and measurable controls.
  • Build and maintain the control repositories associated with:
  • NIS2
  • PCI DSS
  • CRA
  • other applicable regulatory frameworks.

Define for each control:

  • the objective;
  • the evaluation criteria;
  • the evidentiary requirements;
  • roles and responsibilities;
  • the expected level of maturity.
  • Compliance Governance
  • Maintain traceability between:
  • regulatory requirements;
  • cybersecurity risks;
  • controls;
  • remediation plans;
  • evidence.
  • Define the governance mechanisms that allow for compliance monitoring.
  • Participate in defining monitoring and escalation processes.

Roles:

  • Senior Compliance OfficerMost recent experience1 to 3 years ago

Skills:

  • Audit Expertise Level Expert Most recent experience Any time
  • ISO 27K Level Expert Most recent experience Any time

Language:

  • Dutch or French Level Native or bilingual proficiency
  • English Level Nice to have