Senior Security Compliance Officer
Il y a 2 jours
Brussel Hoofdstad, Belgique
Sloka IT Solutions
Temps plein
80 000 € - 110 000 € Contrat
Gratuit avec email ou Google
Enregistrez cette offre et organisez votre recherche
Créez un compte gratuit pour enregistrer des offres d'emploi, créer des alertes et revenir à cette liste depuis votre tableau de bord.
Gratuit avec email ou Google
En continuant, vous acceptez nos Conditions d’utilisation & Politique de confidentialité.
Job Title: Senior Security Compliance Officer
Duration - Minimum of a year with possible extension
Workplace type - Hybrid
Experience: 6+ Years
Context:
- As part of strengthening its cybersecurity governance and complying with several regulatory and normative requirements, STIB is looking for a Security Compliance Consultant .
- The consultant will work within the cybersecurity program to build, maintain, and develop the compliance framework to meet the requirements of several regulatory and normative frameworks, including:
- NIS2
- PCI DSS
- Cyber Resilience Act (CRA)
- Any other regulatory or normative requirements applicable to the organization
- The mission is primarily focused on building the compliance framework , formalizing requirements, and defining controls. The consultant will not be responsible for the operational implementation of the controls, which will remain the responsibility of the relevant business and IT teams.
- The consultant will be responsible for translating regulatory, normative and cybersecurity requirements into a coherent, measurable, auditable and sustainable compliance framework.
- In this capacity, he will ensure the definition and maintenance of control frameworks, assessment methodologies, evidence requirements and associated reporting mechanisms.
Main responsibilities:
- Construction and maintenance of control repositories
- Analyze the applicable regulatory and normative requirements.
- Translate these requirements into concrete and measurable controls.
- Build and maintain the control repositories associated with:
- NIS2
- PCI DSS
- CRA
- other applicable regulatory frameworks.
Define for each control:
- the objective;
- the evaluation criteria;
- the evidentiary requirements;
- roles and responsibilities;
- the expected level of maturity.
- Compliance Governance
- Maintain traceability between:
- regulatory requirements;
- cybersecurity risks;
- controls;
- remediation plans;
- evidence.
- Define the governance mechanisms that allow for compliance monitoring.
- Participate in defining monitoring and escalation processes.
Roles:
- Senior Compliance OfficerMost recent experience1 to 3 years ago
Skills:
- Audit Expertise Level Expert Most recent experience Any time
- ISO 27K Level Expert Most recent experience Any time
Language:
- Dutch or French Level Native or bilingual proficiency
- English Level Nice to have