Asset Management Expert Consultant

keystone-solutions; Brussel; Hybride; EUR 90 000 - 120 000; Plein temps

Résumé du poste

Keystone Solutions is seeking an Asset Management Expert for a three-month consultancy at a client site to evaluate current practices and deliver an improvement plan. You will map asset management across hardware, software, data, cloud and OT, assess CMDB and discovery tools, and present findings to the CISO and stakeholders.

Fluent English is required; Dutch or French is a plus. The role reports to the CISO and requires senior expertise with a focus on delivering concrete improvements within a

Qualifications

• Assess risks related to unmanaged, obsolete, or unpatched assets.
• Benchmark against ISO 27001 Annex A, CyFun, and NIST standards.
• Know discovery and classification of IT, cloud and OT assets.
• Perform asset management assessments and maintain asset registers.
• Present findings clearly to management and CISO on a short mission.

Responsabilités

• Provide objective AS-IS assessment of asset management and risk exposure.
• Deliver assessment report, inventory overview, and gap analysis.
• Map current asset state across hardware, software, data, cloud, and OT.
• Evaluate CMDB and discovery tools for accuracy.
• Organize interviews with IT infrastructure, application management, and security teams.
• Present findings to the CISO and ensure knowledge transfer.

Connaissances

Asset management expertise

Risk assessment

Senior consultant SFIA 5

Stakeholder communication

Dutch or French fluency

English proficiency

Formation

Master's degree or equivalent

ISO 27001 Lead Auditor/Implementer

Outils

ServiceNow

Lansweeper

Tanium

Discovery tools

Description du poste

Mission Overview:

Keystone Solutions is seeking an Asset Management Expert for a consultancy mission at a client site. This role is crucial for evaluating the current asset management practices within the organization and delivering a comprehensive improvement plan. As a consultant, you will be representing Keystone Solutions while working closely with the Chief Information Security Officer (CISO).

Key Responsibilities:

• Provide an objective assessment of the current asset management (AS-IS), risk exposure, and priority improvement areas.
• Deliverables include an assessment report, inventory overview, gap analysis against best practices and standards (ISO 27001 Annex A, CyFun, NIST), risk and priority matrix for unmanaged or poorly known assets, and a detailed improvement plan.
• Map the current state of asset management (hardware, software, data, cloud, OT).
• Evaluate existing asset registers, CMDB, and discovery tools for completeness and currency.
• Organize interviews and workshops with stakeholders (IT infrastructure, application management, security).
• Identify gaps against ISO 27001 Annex A / CyFun requirements related to asset management.
• Analyze and prioritize risks associated with unmanaged or obsolete assets.
• Develop a concrete improvement plan for inventory, classification, and ownership of assets.
• Present findings and recommendations to the CISO and stakeholders.
• Ensure knowledge transfer to the CISO team at the end of the mission.

Knowledge Areas:

• Asset management: inventory, classification, ownership, and lifecycle management.
• CMDB and discovery tools (e.g., ServiceNow, Lansweeper, Tanium or equivalent).
• Cloud and OT asset management; shadow IT detection.
• Frameworks and standards (ISO 27001 Annex A 5.9-5.14, CyFun, NIST SP 800-53).

Communication and Collaboration:

• Clear and persuasive communication to diverse audiences (management to IT administrators).
• Collaborate with the CISO, IT infrastructure, application management, and security teams.
• Fluency in Dutch or French is required; bilingualism is a plus; English is required.

Level and Experience:

• Authoritative consulting under broad direction (SFIA level 5 – Ensure, advise).
• Experienced expert in asset management; autonomous from the start of a short mission; explicitly not a junior.

Education:

• Master's degree or equivalent through confirmed relevant experience.
• Certifications are a plus (e.g., ISO 27001 Lead Auditor/Implementer, CISM, CDPSE).

Practical Information:

• Status: Consultancy mission.
• Responsibility Level: SFIA level 5 – Ensure, advise (senior/expert).
• Reports to: CISO.
• Work Arrangement: Full-time; combination of office and remote work as per service agreements.
• Team: CISO Office, in collaboration with IT infrastructure and application management.

Duration: 15/10/2026 - 31/12/2026 3 months (full time)

Skills required:

• Analyse des risques liés aux actifs non gérés, obsolètes ou non patchés - Level: Expert - Most recent: Any time
• Benchmarking par rapport aux standards et frameworks (ISO 27001 Annexe A, CyFun, NIST) - Level: Expert - Most recent: Any time
• Connaissance de la découverte et de la classification des actifs IT, cloud et OT - Level: Expert - Most recent: Any time
• Réaliser des assessments de gestion des actifs ; mise en place et évaluation de registres d’actifs/C - Level: Expert - Most recent: Any time
• Rendre compte clairement au niveau management/CISO, dans le cadre d’une mission courte - Level: Expert - Most recent: Any time

Language requirements:

Dutch or French
Level Active knowledge
English
Level Active knowledge