Asset Management Expert (Cybersécurité)

Rhox; Brussel; Sur place; EUR 70 000 - 110 000; Plein temps

Résumé du poste

Rhox is seeking an Asset Management Expert in Cybersecurity to assess how IT, cloud, OT and information assets are inventoried, classified and managed in Brussels. You will map asset management, audit CMDBs and discovery tools, and interview stakeholders to benchmark against ISO 27001 Annex A, CyFun and NIST.

You will prioritise risks from unmanaged or unpatched assets and present an improvement roadmap to security leadership, transferring knowledge to teams.

Qualifications

• Minimum requirement: senior asset management expertise with the ability to advise under broad direction (SFIA level 5).
• Experience assessing asset management practices and asset registers.
• Knowledge of asset discovery, classification, ownership and lifecycle management for IT, cloud and OT assets.

Responsabilités

• Map current asset management across hardware, software, data, cloud and OT.
• Assess asset registers, CMDBs and discovery tools for coverage and accuracy.
• Interview infrastructure, application management and security stakeholders about current practices.
• Compare practices with ISO 27001 Annex A, CyFun and NIST.
• Prioritise risks linked to unmanaged, obsolete or unpatched assets.
• Present an improvement roadmap, brief security leaders and transfer knowledge.

Connaissances

Senior asset management

Risk assessment

ISO 27001 Annex A

CyFun

NIST SP 800-53

CMDB and asset discovery tools

Stakeholder communication

Dutch or French (B2)

English (B2)

Formation

Master's degree or equivalent relevant experience

Outils

CMDB

Asset discovery tools

Discovery tools

Description du poste

We're looking for an Asset Management Expert in Cybersecurity to assess how IT, cloud, OT and information assets are inventoried, classified and managed. The work focuses on risks from unmanaged, outdated or unpatched assets and benchmarking against ISO 27001 Annex A, CyFun and NIST.

What you'll do

• Map current asset management across hardware, software, data, cloud and OT.
• Assess asset registers, CMDBs and discovery tools for coverage and accuracy.
• Interview infrastructure, application management and security stakeholders about current practices.
• Compare practices with ISO 27001 Annex A, CyFun and NIST.
• Prioritise risks linked to unmanaged, obsolete or unpatched assets.
• Present an improvement roadmap, brief security leaders and transfer knowledge.

What you bring

• Senior asset management expertise and the ability to advise under broad direction (SFIA level 5).
• Experience assessing asset management practices and asset registers.
• Knowledge of asset discovery, classification, ownership and lifecycle management for IT, cloud and OT assets.
• Ability to analyse risks linked to unmanaged, obsolete or unpatched assets.
• Working knowledge of ISO 27001 Annex A, CyFun and NIST SP 800-53.
• Knowledge of CMDB and asset discovery tools.
• Clear communication with management and technical stakeholders.
• Dutch or French (B2).
• English (B2).
• A Master's degree or equivalent relevant experience.

Nice to have

• ISO 27001 Lead Auditor or Lead Implementer, CISM or CDPSE certification.