Business Project Manager ICT Security Compliance

keystone-solutions; Brussel; On-site; EUR 70,000 - 90,000; Full time

Benefits offered by this job

Public sector experience

NIS2 project experience

Certifications: PMP/Prince2/CISM/ISO 2

CMDB/asset management familiarity

Platform security knowledge

Job summary

Keystone Solutions is seeking a Business Project Manager for a consultancy mission at a client site to support NIS2 implementation efforts. You will translate technical requirements into organizational measures, map processes, and collaborate with ICT security and business owners to ensure alignment and governance.

The role emphasizes cross-functional coordination, workshop facilitation, and delivery of clear reports to program management.

Qualifications

• Bachelor's or Master's degree in Computer Science, Business Administration, Public Administration, or equivalent.
• At least 4 years of demonstrable experience in project coordination or management within IT or security context.
• At least 3 years of experience describing processes and drafting policies in a regulated environment.
• Knowledge of CyFun (CCB) and/or ISO 27001/NIST CSF/CIS Controls.
• At least 3 years of stakeholder management and facilitating multidisciplinary groups.

Responsibilities

• Organizational support for NIS2: translate requirements into organizational measures and describe impact across business domains.
• Coordinate and monitor project planning, milestones, deliverables, and risk management for Asset Management and Data & Platform Security.
• Map current and desired processes; help draft policies, work instructions, and governance docs aligned with NIS2/CyFun.
• Prepare management and steering group reports; ensure proper documentation flow and audit readiness.

Skills

Stakeholder coordination

Policy & procedure evaluation

Process analysis & design

Project management IT

Education

Bachelor's or Master's in CS/Business/Public Admin

Job description

Mission Overview

Keystone Solutions is seeking a Business Project Manager for a consultancy mission at a client site. This role focuses on supporting the implementation of the European NIS2 directive, aimed at enhancing the cybersecurity resilience of essential organizations within the EU. The successful candidate will work closely with the business responsible and expert for NIS2, coordinating organizational and substantive aspects of two key projects.

Key Responsibilities

• Organizational Support & Business Impact
  Support the business responsible for NIS2 in translating technical requirements into organizational measures.
  Analyze and describe the impact of the two projects on involved business domains, processes, and stakeholders.
  Facilitate workshops and working sessions with internal stakeholders (ICT, business, data owners, CISO function).
  Contribute to change management and communication towards involved services.


• Project Coordination & Monitoring
  Monitor project planning, milestones, and deliverables for Asset Management and Data & Platform Security.
  Prepare and maintain project sheets, status reports, and progress overviews.
  Organize and follow up on steering groups, working groups, and review moments.
  Identify risks, dependencies, and bottlenecks and escalated as necessary.
  Maintain a structured project file (decisions, actions, documentation).


• Description of Processes, Policies & Procedures
  Map and describe current and desired processes regarding asset management and data & platform management.
  Contribute to the drafting and validation of policies and procedures in accordance with NIS2 / CyFun requirements.
  Assist in the creation of work instructions, process descriptions, and governance documentation.
  Ensure alignment between technical measures and organizational procedures.


• Reporting & Communication
  Prepare clear management reports and progress reports for the program manager and management.
  Ensure a consistent and correct documentation flow within the program.
  Contribute to the preparation of steering group materials and audit requirements (CCB, NIS2 supervision).

Collaboration & Positioning

The NIS2 Implementation Analyst / Project Coordinator will work closely with:
Program Manager NIS2: Reporting, prioritization, and program alignment
Business Responsible / Expert NIS2: Direct support; substantive steering of the projects
ICT Security Team: Technical input, validation of measures
Business data owners & process owners: Establishing scope, impact, and requirements
External security supplier (Proximus / Smals): Coordination of SecaaS 2 / IAP+ implementations.

Required Knowledge & Experience

• Bachelor's or Master's degree in Computer Science, Business Administration, Public Administration, or equivalent through relevant experience.


• At least 4 years of demonstrable experience in project coordination or management within an IT or security context.


• At least 3 years of experience in describing processes, drafting policies, and procedures in a regulated environment.


• Knowledge of the CyFun framework (CCB) and/or related frameworks (ISO 27001, NIST CSF, CIS Controls).


• At least 3 years of experience in stakeholder management and facilitating multidisciplinary working groups.

Assets

• Experience within a federal public service or similar public organization.


• Experience with NIS2 implementation projects or previous involvement in cybersecurity programs.


• Certifications such as PMP, Prince2, CISM, or ISO 27001 Foundation/Lead Implementer.


• Familiarity with asset management tools or CMDB concepts (for the IDENTIFY project).


• Knowledge of platform security principles or data categorization (for the PROTECT project).

Duration

01/10/2026 - 31/05/2027 8 months (full time)

Skills required

• Policies & Procedures Evaluation - Level: Junior - Most recent: Any time


• Process Analysis and design - Level: Junior - Most recent: Any time


• Project Management IT - Level: Confirmed - Most recent: Any time


• Stakeholdercoördinatie in complexe (multi actor) omgevingen - Level: Junior - Most recent: Any time

Language requirements

Dutch
Level Active knowledge
French
Level Passive knowledge