AISB 1098 - Information Security Governance and Risk Management Consultant
Enregistrez cette offre et organisez votre recherche
Créez un compte gratuit pour enregistrer des offres d'emploi, créer des alertes et revenir à cette liste depuis votre tableau de bord.
En continuant, vous acceptez nos Conditions d’utilisation & Politique de confidentialité.
- Information Security Governance and Risk Management Consultant /h3 h3Context /h3 pA Belgian public administration, an entity subject to NIS2, is building its information security function. It is following a CyberFundamentals (CyFun) roadmap as part of a multi-year strategy approved at the highest level. /p pThe consultant reports directly to the CISO. The work is prepared independently, then presented to the various directorates-general, which the consultant supports with security expertise. /p h3Responsibilities /h3 ul liConduct the NIS2 maturity assessment and gap analysis across all of the organisation's security artefacts. /li liDesign the risk management framework: strategy, risk appetite, risk register and treatment plans. /li liLead the external attack surface management (EASM) workstream: discovery, prioritisation and remediation of exposures, together with the IT operator. /li liDraft priority security policies and secure their adoption by management. /li liSupport the directorates-general in embedding security controls, in coordination with the quality departments, the DPO and the IT operator. /li liProduce KPIs and decision files for the executive committee. /li /ul h3Profile /h3 pbEducation and experience /b /p ul liAt least 5 years of experience in information security governance or security risk management. /li liInvolvement in implementing NIS2 (or the Belgian law of 26/04/2024) within an organisation. /li liAt least one maturity assessment or gap analysis led as the responsible person (ISO 27001, CyFun or NIST CSF). /li liExperience building a security risk register and running risk analyses with business owners (ISO 27005 or equivalent method). /li liHands-on EASM
experience:
discovery of exposed assets, prioritisation, remediation follow-up. /li liCertification is an asset: CISM, CISA, CISSP, ISO 27001 Lead Implementer or Lead Auditor, ISO 27005 Risk Manager. /li /ul pbTechnical skills (confirmed level) /b /p ul liNIS and NIS2 directives and their Belgian transposition (laws of 07/04/2019 and 26/04/2024). /li liISO/IEC 27001 (ISMS) and ISO/IEC 27005 (security risk analysis and management). /li liControl frameworks: CyberFundamentals (CyFun), ISO/IEC 27002, NIST CSF. /li liMaturity assessment and gap assessment. /li liRisk register, treatment plans and risk appetite. /li liBusiness impact analysis (BIA) and business continuity. /li liWriting security policies and procedures. /li liAutonomy and drive in moving topics forward. /li liEnjoys structuring work and supporting teams. /li liComfortable facilitating workshops and consultations with business directorates. /li /ul h3Languages /h3 ul liFrench: native level. The assignment is conducted exclusively in French. /li /ul h3Location and conditions /h3 ul liType: consultancy assignment. /li liLocation: Brussels. /li liHybrid: 2 days per week on site for a full-time schedule (pro rata for part time), 3 days remote. /li /ul
-
Information Security Governance
Il y a 5 heures
Brussels, Brussels, Belgique Neurho Solutions Temps pleinNeurho seeks an Information Security Governance Expert to build and mature its information security function. You will work with the CISO to translate assessments into a practical risk approach and help management adopt security controls. Your role includes assessing NIS2 maturity, designing risk frameworks, leading EASM activities, drafting policies, and...
-
Governance Risk and Compliance Consultant
Il y a 14 heures
Brussels, Brussels, Belgique Capco Temps pleinAbout the Team Joining Capco means joining an organization that is committed to an inclusive working environment where you are encouraged to #BeYourselfAtWork. Capco ICT RISK is a multi-faceted team focused on the evaluation, strategy definition, and execution of risk-minded solutions for leading organizations across the Financial Services industry. We...
-
NIS2 Security Governance
Il y a 5 heures
Arrondissement of Brussels-Capital, Brussels, Belgique Abakus IT-Solutions Temps pleinpAbakus IT-Solutions seeks an Information Security Governance and Risk Management Consultant for a Belgian public administration project, focusing on NIS2 maturity assessments, risk framework design, and EASM leadership in coordination with IT and DPO teams. /ppThe role reports to the CISO and involves drafting security policies, embedding controls, and...
-
Information Security Governance Expert
Il y a 5 heures
Brussels, Brussels, Belgique Neurho Solutions SRL Temps pleinWe are looking for an Information Security Governance Expert to help build an information security function and advance its NIS2 and CyberFundamentals roadmap. Working alongside the CISO, you will turn assessments into a practical risk management approach and support business management in adopting security controls. Your role Assess NIS2 maturity and...
-
Information Security GRC Consultant
Il y a 5 heures
Arrondissement of Brussels-Capital, Brussels, Belgique BDO Belgium co Temps pleinpAre you ready to make an impact in the world of Information Security, with a focus on GRC projects? Join BDO as a Information Security GRC Consultant and empower organizations to develop robust control programs that not only meet compliance requirements but also enhance their security posture. Be part of a warm, personal, and pragmatic team that makes a...
-
Chief Information Security Officer
Il y a 2 jours
Brussels, Brussels-Capital, Belgique Fednot Temps pleinWho are we? Every year, 2.5 million Belgians rely on the independent advice of a notary. At Fednot - the country's largest professional federation - we support notaries so they can focus on what they do best: helping citizens through important moments in their lives. Together, we make a difference for both the profession and the public. Fednot plays a...
-
Information Security Governance Expert
Il y a 4 jours
Brussels, Brussels, Belgique Neurho Solutions Temps pleinpWe are looking for an Information Security Governance Expert to help build an information security function and advance its NIS2 and CyberFundamentals roadmap. Working alongside the CISO, you will turn assessments into a practical risk management approach and support business management in adopting security controls. /p h3Your role /h3 ul liAssess NIS2...
-
Information Security GRC Consultant
Il y a 6 heures
Brussels, Brussels, Belgique BDO Belgium co Temps pleinAre you ready to make an impact in the world of Information Security, with a focus on GRC projects? Join BDO as a Information Security GRC Consultant and empower organizations to develop robust control programs that not only meet compliance requirements but also enhance their security posture. Be part of a warm, personal, and pragmatic team that makes a real...
-
Chief Information Security Officer
Il y a 2 jours
Brussels, Brussels-Capital, Belgique NVISO Security Temps pleinNVISO is a pure-play European cyber-security consulting firm: our team of security professionals covers areas such as Security Governance, Risk & Compliance, Security Awareness, Cyber Architecture, Penetration Testing, Threat Hunting & Incident Response, Managed Security Services, etc. This fantastic blend of skills enables us to help organizations prevent,...
-
Data Privacy
Il y a 5 heures
Arrondissement of Brussels-Capital, Brussels, Belgique Capco Temps pleinpWe are a global technology and management consultancy firm specializing in driving digital transformation across the financial services and insurance industry. Our professionals combine innovative thinking with unrivalled industry knowledge to offer clients consulting expertise, complex technology and package integration, transformation delivery, and...
