6 дней назад
Information Security Governance Expert (NIS2)
Вакансия из Hirify Global, списка международных tech-компанийДля мэтча и отклика нужен Plus
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Описание вакансии
Текст:
TL;DR
Information Security Governance Expert (NIS2): Conducting NIS2 maturity assessments, designing risk management frameworks, and strengthening information security governance for a Belgian public-sector ministry with an accent on CyberFundamentals, ISO standards, and external attack surface management. Focus on assessing security artifacts, prioritizing exposures, drafting policies, and producing management decision-making indicators.
Location: On-site in Molenbeek-Saint-Jean, Belgium; consultancy mission at a client site. Duration: 01/12/2026–30/06/2027, 7 months, part time 3/5.
Company
provides consultancy services, with this mission supporting the Ministry of the Federation Wallonia-Brussels in strengthening information security governance.
What you will do
- Conduct the NIS2 maturity assessment and gap analysis across the Ministry’s 40 security artifacts.
- Design the risk management framework, including strategy, risk appetite, risk register, and treatment plans.
- Lead the external attack surface management initiative, covering asset discovery, exposure prioritization, and remediation follow-up.
- Draft priority security policies and facilitate their adoption by management.
- Support General Administrations in integrating security controls with CEN, DQPS, DPO, and .
- Produce indicators and decision-making documents for the Management Committee.
Requirements
- Confirmed experience with business impact analysis (BIA) and business continuity.
- Confirmed experience facilitating workshops and consultations with business management.
- Confirmed implementation experience with NIS and NIS2 directives, including the Belgian laws of 7 April 2019 and 26 April 2024.
- Confirmed experience in maturity assessment and gap analysis.
- Confirmed experience with external attack surface management and exposure, including asset discovery, prioritization, and treatment follow-up.
- Confirmed experience with ISO/IEC 27001 information security management systems.
- Confirmed experience with ISO/IEC 27005 security risk analysis and management.
- Confirmed experience drafting security policies and procedures.
- Confirmed experience with CyberFundamentals (CyFun), ISO/IEC 27002, and NIST CSF security control frameworks.
- Confirmed experience managing risk registers, treatment plans, and risk appetite.
- Native French is required.
Culture & Benefits
- On-site consultancy work with direct engagement with client teams.
- Varied projects across different client environments.
- Professional development and broad learning opportunities in information security governance.
- Career growth within a consultancy framework.
Будьте осторожны
Если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого. Это мошенники. Обязательно жмите «Пожаловаться» или пишите в поддержку. Подробнее в гайде →
Музыка
Осень
Поддержка