Expert Cybersecurity Consultant

h3Mission Overview: /h3 pKeystone Solutions is seeking an Expert Cybersecurity to join our consultancy mission at a client site. In this role, you will ensure that healthcare and welfare services remain digitally secure, reliable, and resilient in the face of increasing cyber threats. You will actively contribute to the development of secure systems, reliable data, and robust processes that protect the organization and its services. /p h3Key

Responsibilities:
/h3 pAs an Expert Cybersecurity, you will play a central role in the development, implementation, and monitoring of cybersecurity and information security. Your responsibilities will include: /p ul liManaging and further developing the Information Security Management System (ISMS), including policies, processes, procedures, documentation, and review cycles, while leading the path towards ISO 27001 certification. /li liIdentifying, analyzing, and monitoring cybersecurity risks, managing the risk register, and periodically reporting to relevant committees. /li liEnsuring compliance with relevant standards and regulations, including ISO 27001, NIS2, and CyberFundamentals (CyFun), and preparing and guiding audits. /li liManaging the Statement of Applicability and audit documentation to ensure the organization remains audit-ready. /li liMaintaining the Incident Response Plan, coordinating security incidents, and ensuring proper follow-up on reporting obligations and improvement actions. /li liContributing to business continuity and disaster recovery initiatives, with a focus on security aspects. /li liAssessing supplier and supply chain risks and ensuring compliance with security requirements among critical partners. /li liDirecting external security partners and monitoring follow-up on vulnerability management, patch management, monitoring, and identity access management. /li liEnhancing security awareness within the organization through training, education, and awareness campaigns. /li liSupporting management and executives with clear reporting on KPIs, risks, incidents, and the progress of cybersecurity initiatives. /li /ul h3Candidate Profile: /h3 pWe are looking for an experienced cybersecurity expert who thrives in a developing organization. You combine strong technical expertise with a pragmatic approach and are energized by building and embedding cybersecurity within a complex organizational context. You should identify with the following profile: /p ul liMaster's degree, preferably in an ICT-related or business administration field, or equivalent through relevant experience. /li liAt least 5+ years of demonstrable experience in information security, cybersecurity, or ICT risk management. /li liThorough knowledge of information security frameworks and standards such as ISO 27001, NIS2, and CyberFundamentals (CyFun). /li liExperience with risk management, audits, compliance, and establishing or managing an ISMS. /li liUnderstanding of modern IT environments, including infrastructure, cloud, identity, and security services. /li liInsight into security operations, vulnerability management, supplier management, and incident management. /li liCertifications such as CISSP, CISM, ISO 27001 Lead Implementer, or ISO 27001 Lead Auditor are a strong asset. /li liStrong analytical skills, structured work approach, and ability to translate complex issues into actionable steps and advice. /li liAbility to engage stakeholders at various levels and smoothly transition between operational teams, management, and executives. /li liExperience in the healthcare sector or with the protection of sensitive personal data is a plus. /li liFluent communication in Dutch and a good command of English. /li /ul h3Practical Information: /h3 pThe work regime can be part-time (4/5) or full-time, with at least 2 days in the office on fixed days, Tuesday and Thursday. /p h3Duration: As soon as possible
- 18/12/2026 3 months (full time) /h3 h3Skills required: /h3 ul libAudit Expertise /b
- Level: Advanced
- Most recent: 1 to 3 years ago /li libCyberFundamentals /b
- Level: Advanced
- Most recent: Any time /li libIncident Management /b
- Level: Advanced
- Most recent: Any time /li libISMS /b
- Level: Intermediate
- Most recent: Any time /li libISO27001 /b
- Level: Advanced
- Most recent: Any time /li libNIS2 /b
- Level: Advanced
- Most recent: Any time /li libRisk Management /b
- Level: Advanced
- Most recent: Any time /li libSecurity Tooling /b
- Level: Intermediate
- Most recent: Any time /li /ul h3Language

requirements:
/h3 pDutchbr/Level Native or bilingual proficiencybr/Englishbr/Level Professional working proficiency /p