Information Security Compliance

h3Information Security Compliance Governance Coordinator (NIS2 / ISO 27001) (m/w/d) /h3ulliFull-time /liliLevel of

Experience:
5-10 years /liliDepartment: System network functions /liliTypes of work contract: Permanent /li /ulpEverience is an international consulting group delivering AI-augmented digital services and placing people at the heart of the AI revolution. /ppWith a presence in Europe, Africa, Asia and America, Everience offers its 4,000-strong workforce the most demanding and stimulating environment in which to transform and develop their skills, learning about new AI-based roles and building their future employability. /ppThrough its Symbiotic Academy the group offers a unique hub for training, practical application and exchange where everyone can experiment, learn, and progress in the fields of artificial intelligence and data. /ppIn accordance with its core purpose of orchestrating the symbiotic relationship between humans and AI in the workplace, Everience is making the augmented employee the driving force of a “symbiotic age”, where AI enhances talents and opens up new career opportunities. /ppWe are an essential entity under the NIS2 Directive (as transposed in Belgium) and are building our compliance posture via the ISO/IEC 27001 framework. We are looking for a structured and assertive coordinator to join the Information Security team and keep our NIS2 / ISO 27001 compliance program on track. /ppYou will be the operational backbone of the program: tracking policy implementation, collecting and managing evidence, maintaining reporting dashboards, and running the practical side of project governance. /ph3Key responsibilities /h3ullibCompliance tracking and reporting /bulliBuild and maintain Excel dashboards and PowerPoint progress reports on NIS2 / ISO 27001 compliance for the management and steering committees /liliConsolidate status information, highlight gaps, delays and risks, and keep the data accurate and up to date /li /ul /lilibOwner engagement and evidence management /bulliCollaborate with the owners responsible for implementing policies and controls across the organization /liliFollow up with these owners, assertively and constructively, to obtain status updates and deliverables within agreed deadlines /liliCollect, review for completeness, and organise evidence supporting control implementation /liliMaintain a structured, audit-ready evidence repository with clear naming, versioning and traceability /li /ul /lilibProject governance and coordination /bulliOrganise and coordinate governance meetings (steering committees, working groups, follow-up meetings), including agendas, minutes, action logs and follow-ups /liliHandle the administrative and practical aspects of project governance /liliEscalate blockers and overdue actions to the CISO in a timely manner /li /ul /liliPlan and coordinate the agendas for internal and external audits (ISO 27001 certification, surveillance audits, NIS2-related assessments) /liliSchedule auditees and interviews, and make sure documentation and evidence are ready beforehand /liliTrack audit findings and follow up on corrective actions with the relevant ownersullibRequired /bulliBachelor's degree or higher (information management, business administration, IT, law, or a related field) /liliWorking knowledge of information security governance and a good understanding of ISO/IEC 27001 (certification not required) /liliHighly structured, organized and detail-oriented, with a strong sense of follow-up /liliAssertive and credible communicator, comfortable chasing stakeholders at all levels /liliAdvanced Excel skills (formulas, pivot tables, dashboards) and strong PowerPoint skills for clear management reporting /liliStrong written and spoken English and French; Dutch is a clear asset in the Belgian context /liliFirst experience (1–3 years) in compliance, GRC, audit support, PMO/PSO or a similar role /li /ul /li /ul /lilibNice to have /bulliFamiliarity with NIS2 and the Belgian framework (national law, Centre for Cybersecurity Belgium, CyFun) /liliKnowledge of other frameworks (ISO 27002, NIST, CIS) or GRC tools /liliFoundation-level certification (e.g. ISO 27001 Foundation) /li /ul /liliRigor, autonomy and reliability /liliDiplomacy combined with the ability to hold people to their commitments /liliGood sense of priorities and deadlines /liliDiscretion when handling sensitive information /li /ulpAll our positions are open to both women and men and are, of course, open to people with disabilities. /p