Expert Cybersecurity

pWe're looking for an experienced Cybersecurity Expert to join our client's team and help strengthen its information security strategy and overall digital resilience. This is an opportunity to combine strategic thinking with hands-on security management, taking ownership of key initiatives that protect systems, data, and business processes. You'll play a central role in maturing the organisation's security framework, strengthening governance and compliance, and driving progress towards ISO 27001 certification. /p h3Key Responsibilities /h3 ul liManage and continuously improve the Information Security Management System (ISMS), including policies, procedures, documentation, and review cycles. /li liLead and support initiatives towards ISO 27001 certification, ensuring alignment with relevant security standards and regulatory requirements. /li liIdentify, assess, and monitor information security risks, maintain the risk register, and define appropriate mitigation measures. /li liReport on security risks, incidents, KPIs, and progress to management and relevant governance bodies. /li liEnsure compliance with applicable frameworks and regulations, including ISO 27001, NIS2, and CyberFundamentals (CyFun). /li liPrepare and coordinate internal and external audits, maintain the Statement of Applicability, and ensure audit evidence is properly documented. /li liMaintain the Incident Response Plan and coordinate incident management, investigation, and follow-up actions. /li liContribute to business continuity and disaster recovery planning from an information security perspective. /li liAssess supplier and supply-chain risks and monitor security requirements for critical external partners. /li liCoordinate external security specialists and follow up on vulnerability management, patch management, security monitoring, and identity and access management. /li liPromote security awareness through communication, training, and targeted awareness initiatives. /li liAdvise management and business stakeholders on security priorities, emerging risks, and ongoing improvement initiatives. /li /ul h3Your Profile /h3 ul liMaster's degree, preferably in ICT or business administration, or equivalent professional experience. /li liAt least five years of experience in cybersecurity, information security, or ICT risk management. /li liStrong knowledge of security frameworks and standards, particularly ISO 27001, NIS2, and CyberFundamentals (CyFun). /li liProven experience with risk management, audits, compliance, and the implementation or management of an ISMS. /li liGood understanding of modern IT environments, including infrastructure, cloud services, identity management, and security solutions. /li liFamiliarity with security operations, vulnerability and incident management, and supplier security assessments. /li liExperience in healthcare or in protecting sensitive personal data is a strong asset. /li liExcellent analytical and organisational skills, with the ability to translate complex security requirements into practical recommendations and actionable plans. /li liStrong communication skills and the ability to engage effectively with operational teams, business stakeholders, and senior management. /li liCertifications such as CISSP, CISM, ISO 27001 Lead Implementer, or ISO 27001 Lead Auditor are considered a plus. /li liFluent Dutch and a good command of English. /li /ul h3Practical Information /h3 ul liWorkload: Full-time or 4/5 employment. /li liOn-site presence: At least two days per week, with fixed office days on Tuesday and Thursday. /li /ul pIf you're passionate about cybersecurity and enjoy combining governance, risk management, and practical security improvements, this role offers the opportunity to make a meaningful contribution to an organisation's long-term security maturity and resilience. /p h3Contactperson Reference /h3 ul liReference #: INW28368 /li liMarilyn Weytens /li /ul