Information Security Governance Consultant

Job Description
The employer is a Major player in the cybersecurity landscape dedicated to safeguarding sensitive environments through a comprehensive suite of bespoke defensive strategies, ranging from high-level strategic advisory to continuous, round-the-clock operational oversight and rapid crisis mitigation.
They are looking for a seasoned expert Information Security Governance Consultant on a Permanent role in Brussels, Belgium to join its specialized advisory division in charge of delivering high-end security resilience, offering a comprehensive suite of services ranging from strategic consulting and governance to continuous threat detection and emergency response protocols.
MISSIONSStrategic Advisory & GovernanceGuide diverse organizations in architecting robust security frameworks, ensuring that internal policies, operational processes, and risk reduction strategies are perfectly aligned with business objectives.
Compliance & Risk AssuranceEvaluate organizational security maturity by conducting thorough gap analyses against international benchmarks and evolving regulatory mandates.
Design and implement structured security programs, steering clients toward full alignment with industry-recognized best practices.
Execute comprehensive risk management lifecycles, performing both high-level organizational assessments and targeted project-specific evaluations.
Act as a trusted advisor to C-level executives, Data Protection Officers, and IT leadership, translating complex technical risks into actionable business insights.
Audit & ValidationLead rigorous internal and external audit engagements, including pre-certification assessments to ensure adherence to global standards and legal requirements.
Serve as a subject matter expert, providing technical guidance and support to internal audit teams regarding complex security domains.
Enablement practiceAdvise and assist customers in establishing effective cyber governance practices and strategies, including Information Security policies, processes, and risk mitigation measures.
Assurance practicePerform maturity assessments and gap analyses against standards (CyFun, ISO 27001/27002, SANS CIS TOP20, NIST CSF) and regulatory frameworks (NIS2, DORA, GDPR).
Establish Information Security programs and guide customers toward defined frameworks.
Conduct Information Security Risk Management processes following ISO 27005 and execute ad hoc project-level risk assessments.
Provide tailored advisory services to CISOs, Risk Officers, DPOs, IT Managers, and executive committees.
Audit practicePerform internal, external, and pre-certification Information Security audits against established standards and regulatory frameworks.
Provide expertise and support to Internal Auditors on Information Security topics.
RequirementsFull professional fluency in English, Dutch, and French is mandatory.
A minimum of five years of dedicated experience within the information security domain.
Industry-recognized credentials/certifications (such as CISSP, CISM, or ISO 27001 certifications) are highly regarded.
Proven experience leading cybersecurity projects and coordinating stakeholders.
Advanced capacity for analytical / critical thinking and the resolution of complex technical obstacles.
A track record of implementing pragmatic, high-impact strategies to mitigate digital threats.
Extensive background in steering security initiatives and managing cross-functional collaboration across various organizational levels.

Education:
Bachelor's degreeDesired

experience:
more than 5 yearsLanguage RequirementsFrench
- ProfessionalEnglish
- ProfessionalDutch
- Native / BilingualBenefitsType of Contract : Permanent role (on-site/in-person) in London (UK) or New York (USA).

Salary:
To 70k

Benefits:
TOIL / Remote work / Company Mutual / Meal vouchersRecruitment process :Recruiter / HR CallTeam Lead InterviewFinal InterviewRequirementsCISSP, CISM, ISO 27001, CyFun, ISO 27001/27002, ISO 27005, SANS CIS TOP20, NIST CSF) and regulatory frameworks (NIS2, DORA, GDPR).