Information Security Governance Expert

Il y a 3 heures

SintJansMolenbeek, Brussels, Belgique Keystone Solutions Temps plein
h3Mission Overview: /h3 pKeystone Solutions is seeking an Information Security Governance Expert to join a consultancy mission at a client site. This role involves working closely with the Ministry of the Federation Wallonia-Brussels (MFWB) to enhance their information security function in alignment with NIS2 and the CyberFundamentals (CyFun) strategy approved by the Government. /p h3Key

Responsibilities:
/h3 ulliConduct the NIS2 maturity assessment and gap analysis on the 40 security artifacts of the Ministry. /liliDesign the risk management framework: strategy, appetite, register, and treatment plans. /liliLead the external attack surface management (EASM) initiative: discovery, prioritization, and remediation of exposures with Keystone Solutions. /liliDraft priority security policies and facilitate their adoption by management. /liliSupport the General Administrations in integrating security controls, in collaboration with CEN, DQPS, DPO, and Keystone Solutions. /liliProduce indicators and decision-making documents for the Management Committee. /li /ul h3Consultancy Nature: /h3 pThis position emphasizes on-site work and the consultant identity, allowing you to engage directly with client teams. /p h3Dynamic Projects: /h3 pYou will face a variety of challenges across different client environments, ensuring no two days are the same. /p h3Turbo-Charged Learning: /h3 pThis role offers extensive professional development and broad learning experiences, enhancing your expertise in information security governance. /p h3Skyrocketing Ambition: /h3 pAt Keystone Solutions, we are committed to your career growth within our consultancy framework. /p h3Values: /h3 pBeing a /p pIf you are ready to tackle technical and strategic challenges in a dynamic consultancy environment. /p h3Duration: /h3 p01/12/2026
- 30/06/2027 7 months
• (part time 3/5) /p h3Skills required: /h3 ullibAnalyse d’impact métier (BIA) et continuité d’activité /b
- Level: Confirmed
- Most recent: 1 to 3 years ago /lilibAnimation d’ateliers et de concertations avec des directions métier /b
- Level: Confirmed
- Most recent: 1 to 3 years ago /lilibDirectives NIS et NIS2 (lois belges du 7 avril 2019 et du 26 avril 2024) : mise en œuvre /b
- Level: Confirmed
- Most recent: This year /lilibÉvaluation de maturité et diagnostic d’écart (gap assessment) /b
- Level: Confirmed
- Most recent: 1 to 3 years ago /lilibGestion de la surface d’attaque externe (EASM) et de l’exposition : découverte d’actifs, priorisation, suivi du traitement /b
- Level: Confirmed
- Most recent: This year /lilibISO/IEC 27001 : système de management de la sécurité de l’information (SMSI) /b
- Level: Confirmed
- Most recent: 1 to 3 years ago /lilibISO/IEC 27005 : analyse et gestion des risques de sécurité /b
- Level: Confirmed
- Most recent: 1 to 3 years ago /lilibRédaction de politiques et de procédures de sécurité /b
- Level: Confirmed
- Most recent: 1 to 3 years ago /lilibRéférentiels de contrôles de sécurité : CyberFundamentals (CyFun), ISO/IEC 27002, NIST CSF /b
- Level: Confirmed
- Most recent: This year /lilibRegistre des risques, plans de traitement et appétence au risque /b
- Level: Confirmed
- Most recent: 1 to 3 years ago /li /ul h3Language

requirements:
/h3 pFrench /p pLevel Native /p