Business project manager - ICT Security & Compliance (NIS2)

Rhox; Brussel; Sur place; EUR 65 000 - 90 000; Plein temps

Résumé du poste

Rhox is seeking a Business Project Manager to coordinate Asset Management and Data & Platform Security projects within a NIS2 compliance programme.

You will translate NIS2 and CyFun requirements into actionable measures, map processes, and facilitate cross-functional workshops with ICT security, data owners, and management. A strong background in IT security project management and governance is essential.

Qualifications

• Minimum four years of IT project management experience in a security context.
• Minimum three years of process analysis and design in regulated environments.
• At least three years of multi-actor stakeholder management and facilitation experience.
• Knowledge of CyFun and related standards (ISO 27001, NIST CSF, CIS Controls).
• Ability to translate NIS2 and CyFun requirements into actionable governance and work instructions.

Responsabilités

• Coordinate delivery of Asset Management and Data & Platform Security projects; track milestones, deliverables, dependencies and decisions.
• Translate NIS2 and CyFun requirements into organizational measures and actionable follow-up for teams.
• Map current and target processes for asset management, data and platform security; align policies with controls.
• Facilitate workshops, steering groups and review sessions with ICT security, data owners, process owners and CISO.
• Produce status reports, management material and audit evidence; identify risks and escalate blockers.

Connaissances

IT project management

Process analysis

Stakeholder management

CyFun framework

Policy development

Management reporting

Formation

Bachelor's or Master's degree in CS/Business/Public Admin

Description du poste

A Belgian public sector organisation responsible for social security is running a NIS2 implementation programme to align governance, processes and security controls with the European Union's Network and Information Security Directive 2. The Business Project Manager coordinates Asset Management and Data & Platform Security projects within this security and compliance programme, using the CyFun framework to connect technical requirements with business processes, policies and procedures. The role combines IT project management, process analysis and stakeholder coordination across ICT security, data owners, process owners and management.

The mission

The NIS2 programme is structured around the CCB CyFun framework and is in its realisation phase, with measures implemented through projects grouped by CyFun function. Asset Management covers IDENTIFY (ID.AM), including governance of systems, people, assets, data and processes. Data & Platform Security covers PROTECT (PR.DS and PR.PS), protecting the confidentiality, integrity and availability of citizen data and social security systems. These projects provide an organisational basis for NIS2 compliance, governance and continuity of essential public services.

Your responsibilities

• Coordinate delivery of the Asset Management and Data & Platform Security projects by maintaining milestones, deliverables, dependencies and decisions.
• Translate NIS2 and CyFun requirements into organisational measures, documented business impacts and actionable follow-up for responsible teams.
• Map current and target processes for asset management, data security and platform security, and align policies, procedures and work instructions with technical controls.
• Facilitate workshops, steering groups and review sessions across ICT security, business stakeholders, data owners, process owners and the CISO function.
• Produce status reports, management material, project dossiers and audit evidence, while identifying risks, escalating blockers and supporting change communication.

Your profile

Essential skills

• Bring at least four years of experience in IT project management in a security context, covering plans, deliverables, risks and governance forums.
• Bring at least three years of experience in process analysis and design in regulated environments, including policy and procedure development.
• Demonstrate at least three years of stakeholder management in complex multi-actor environments and experience facilitating multidisciplinary working groups.
• Understand the CyFun framework and related frameworks such as ISO 27001, NIST CSF or CIS Controls.
• Evaluate policies and procedures against NIS2 and CyFun requirements, connecting technical controls with practical governance and work instructions.
• Write clear management reports and project documentation, and confidently flag risks or escalating decisions.

Education

• Bachelor's or master's degree in computer science, business administration, public administration, or equivalent relevant experience.