Asset Management Expert Consultant

Keystone Solutions; Brussel; Hybride; EUR 90 000 - 140 000; Plein temps

Résumé du poste

Keystone Solutions is seeking an Asset Management Expert for a 3-month consultancy at a client site in Belgium. You will evaluate current asset management practices (hardware, software, data, cloud, OT) and deliver a comprehensive improvement plan, reporting to the CISO and stakeholders.

By conducting interviews, mapping asset registers and CMDBs, and aligning with ISO 27001 Annex A, CyFun, and NIST, you will produce a prioritized risk and action plan and ensure knowledge transfer to the CISO

Qualifications

• Master's degree or equivalent with relevant experience.
• Experience in asset management and auditing standards.
• Knowledge of CMDB, discovery tools and asset lifecycle.

Responsabilités

• Assess current asset management practices and risk exposure.
• Produce an improvement plan covering inventory, classification and ownership.
• Map assets across hardware, software, data, cloud and OT.
• Evaluate asset registers and CMDB for completeness and currency.
• Present findings to CISO and stakeholders; ensure knowledge transfer.

Connaissances

Asset management

Discovery tools

Shadow IT detection

Risk analysis

Formation

Master's degree

ISO 27001 Lead Auditor/Implementer

CISM

CDPSE

Outils

ServiceNow

Lansweeper

Tanium

Description du poste

Mission Overview:

Keystone Solutions is seeking an Asset Management Expert for a consultancy mission at a client site. This role is crucial for evaluating the current asset management practices within the organization and delivering a comprehensive improvement plan. As a consultant, you will be representing Keystone Solutions while working closely with the Chief Information Security Officer (CISO).

Key Responsibilities:

• Provide an objective assessment of the current asset management (AS-IS), risk exposure, and priority improvement areas.
• Deliverables include an assessment report, inventory overview, gap analysis against best practices and standards (ISO 27001 Annex A, CyFun, NIST), risk and priority matrix for unmanaged or poorly known assets, and a detailed improvement plan.
• Map the current state of asset management (hardware, software, data, cloud, OT).
• Evaluate existing asset registers, CMDB, and discovery tools for completeness and currency.
• Organize interviews and workshops with stakeholders (IT infrastructure, application management, security).
• Identify gaps against ISO 27001 Annex A / CyFun requirements related to asset management.
• Analyze and prioritize risks associated with unmanaged or obsolete assets.
• Develop a concrete improvement plan for inventory, classification, and ownership of assets.
• Present findings and recommendations to the CISO and stakeholders.
• Ensure knowledge transfer to the CISO team at the end of the mission.

Knowledge Areas:

• Asset management: inventory, classification, ownership, and lifecycle management.
• CMDB and discovery tools (e.g., ServiceNow, Lansweeper, Tanium or equivalent).
• Cloud and OT asset management; shadow IT detection.
• Frameworks and standards (ISO 27001 Annex A 5.9-5.14, CyFun, NIST SP 800-53).

Communication and Collaboration:

• Clear and persuasive communication to diverse audiences (management to IT administrators).
• Collaborate with the CISO, IT infrastructure, application management, and security teams.
• Fluency in Dutch or French is required; bilingualism is a plus; English is required.

Level and Experience:

• Authoritative consulting under broad direction (SFIA level 5 – Ensure, advise).
• Experienced expert in asset management; autonomous from the start of a short mission; explicitly not a junior.

Education:

• Master's degree or equivalent through confirmed relevant experience.
• Certifications are a plus (e.g., ISO 27001 Lead Auditor/Implementer, CISM, CDPSE).

Practical Information:

• Status: Consultancy mission.
• Responsibility Level: SFIA level 5 – Ensure, advise (senior/expert).
• Reports to: CISO.
• Work Arrangement: Full-time; combination of office and remote work as per service agreements.
• Team: CISO Office, in collaboration with IT infrastructure and application management.

Duration: 15/10/2026 - 31/12/2026 3 months (full time)

Skills required:

• Analyse des risques liés aux actifs non gérés, obsolètes ou non patchés - Level: Expert - Most recent: Any time
• Benchmarking par rapport aux standards et frameworks (ISO 27001 Annexe A, CyFun, NIST) - Level: Expert - Most recent: Any time
• Connaissance de la découverte et de la classification des actifs IT, cloud et OT - Level: Expert - Most recent: Any time
• Réaliser des assessments de gestion des actifs ; mise en place et évaluation de registres d’actifs/C - Level: Expert - Most recent: Any time
• Rendre compte clairement au niveau management/CISO, dans le cadre d’une mission courte - Level: Expert - Most recent: Any time

Language requirements:

Dutch or French
Level Active knowledge
English
Level Active knowledge