Asset Management Expert – Cybersecurity Assessment

What you will do

You will work directly for the Chief Information Security Officer (CISO) to deliver an objective assessment of how the organisation currently manages its assets - covering IT, operational technology and information assets - and provide a structured improvement roadmap.

Your deliverables include:

• An assessment report of the current asset management state (AS-IS) with coverage rate and maturity level
• An overview of existing asset registers, tools and processes
• A gap analysis against best practices and standards (ISO 27001 Annex A, CyFun, NIST)
• A risk and priority matrix for unmanaged or poorly known assets
• A detailed improvement plan (roadmap) for asset discovery, classification and lifecycle management
• An executive summary for the CISO and management

Your main tasks:

• Map the current state of asset management (hardware, software, data, cloud, OT)
• Evaluate existing asset registers, CMDBs and discovery tools for completeness and currency
• Organise interviews and workshops with stakeholders (IT infrastructure, application management, security)
• Identify gaps against ISO 27001 Annex A and other relevant asset management requirements
• Analyse and prioritise risks related to unmanaged or obsolete assets
• Develop a concrete improvement plan for asset inventory, classification and ownership
• Present findings and recommendations to the CISO and stakeholders
• Ensure knowledge transfer to the CISO's team at the end of the assignment

What we are looking for

You are a senior expert in asset management with the autonomy to hit the ground running in a short assignment. You provide authoritative advice under broad direction (SFIA level 5 - Ensure, advise).

Knowledge domains:

• Asset management: inventory, classification, ownership and lifecycle management
• CMDB and discovery tools (e.g. ServiceNow, Lansweeper, Tanium or equivalent)
• Cloud and OT asset management; shadow IT detection
• Frameworks and standards (ISO 27001 Annex A 5.9-5.14, CyFun, NIST SP 800-53)

Communication and collaboration:

• Clear and persuasive communication to varied audiences (from management to IT administrators)
• Ability to collaborate with the CISO, IT infrastructure, application management and security teams
• Dutch or French required; bilingualism is an asset; English required

Education and certification:

• Master's degree, or equivalent through confirmed relevant experience
• Certifications are an asset (e.g. ISO 27001 Lead Auditor/Implementer, CISM, CDPSE)

The setting

This assignment runs from 15 October to the end of December 2026 (approximately two months). You will be based in Brussels with a hybrid working arrangement combining office and remote work. You will report to the CISO and work closely with IT infrastructure and application management teams.

This is part of a team request for four cybersecurity assessment experts working within the CISO's office on ISO 27001-related assignments.

You can join us for this assignment as a freelancer or as an employee of HumanInTech. Same role, same team. If you join as an employee, your employment continues beyond this assignment. When it ends, we’ll work together to find your next assignment.

Location: Brussels, hybrid

Employer / contracting party: HumanInTech

Applications close (Brussels time): September 29, 2026 at 2:00 AM

Engagement: Freelance or employed by HumanInTech

Working hours: Full-time

Experience: 6-10 years or more

Education: Master's or more

Published: September 2026