Senior Information Security

h3Senior Information Security NIS2 Compliance Consultant (Senior)
- SMALS /h3pSMALS is seeking a senior consultant to guide an organization toward compliance with the Belgian NIS2 obligations arising from the law of 26 April 2024. The assignment focuses on supporting the implementation of an information security policy and its associated technical and organizational measures. The consultant will work closely with the organization and its suppliers. Policies must be developed, aligned and implemented effectively. /ppThe consultant will prepare and support the organization for audits, inspections and supervisory activities. A key objective is to ensure that the organization can demonstrate compliance with the applicable NIS2 obligations through evidence and documentation. The consultant will monitor progress and report it to the relevant stakeholders. The role therefore combines information security expertise, compliance work and stakeholder coordination. /ppThe profile requires extensive experience in complex enterprise IT environments and at least five years in information security. Strong knowledge of NIS2, its Belgian transposition, CyberFundamentals and related information-security frameworks is expected. The consultant must balance cybersecurity risks against operational objectives and translate theory into practical, effective measures. Independence, leadership, persuasion and strong communication across internal and external stakeholders are essential. /ph3Top Reasons to Apply /h3h3Lead NIS2 compliance /h3h3Shape security policy /h3h3Audit readiness ownership /h3h3Long-term hybrid assignment /h3h3Responsibilities /h3ulliGuide NIS2 compliance /liliImplement security policy /liliImplement security measures /liliCollaborate with suppliers /liliDevelop security policies /liliHarmonize security policies /liliImplement security policies /li /ulh3Must Have /h3ulli10+ years enterprise IT /lili5+ years information security /liliProgress reporting experience /li /ulh3Nice to Have /h3ulliISO/IEC 27001 experience /liliPublic sector experience /liliSocial security experience /li /ulh3Detailed Responsibilities and Skills /h3h3Additional Responsibilities /h3ulliSupport inspection activities /liliSupport supervisory activities /liliDemonstrate NIS2 compliance /liliAt least 10 years of experience in complex enterprise-level IT environments. /liliAt least 5 years of experience in information security in an operational or organizational context. /liliExperience in project management. /liliExperience in stakeholder management. /liliExperience in progress monitoring and reporting. /liliExperience preparing, supporting and following up audits. /liliExperience preparing, supporting and following up inspections. /liliExperience preparing, supporting and following up supervisory/control procedures. /liliAbility to balance cybersecurity risks against operational objectives and communicate about them clearly and convincingly. /liliAbility to demonstrate compliance through evidence and documentation to auditors and supervisory authorities. /liliPragmatic approach that translates theoretical principles into feasible and effective measures. /liliAbility to work independently. /liliStrong expertise, leadership and persuasive ability. /liliExcellent communication skills and ability to collaborate with diverse internal and external stakeholders. /liliActive knowledge of Dutch. /liliActive knowledge of English. /liliActive knowledge of French. /liliPublic-sector experience is a strong asset. /liliSocial-security-sector experience is a strong asset. /li /ulh3Technical skills /h3ulliDemonstrable experience implementing and rolling out an Information Security Management System (ISMS). /liliIn-depth knowledge of the NIS2 Directive. /liliIn-depth knowledge of the Belgian transposition of NIS2. /liliIn-depth knowledge of the CyberFundamentals framework (CCB). /liliIn-depth knowledge of related information-security frameworks. /liliGood understanding of technical security measures and their practical application in organizations. /liliGood understanding of organizational security measures and their practical application in organizations. /liliExperience with ISO/IEC 27001 is preferred. /li /ul