Chief Information Security Officer

Toreon; Vlaanderen; Sur place; EUR 120 000 - 170 000; Plein temps

Avantages offerts par ce poste

Training budget

Certificate support

Flexible work environment

Résumé du poste

Toreon, a Belgian cybersecurity company, seeks a CISO to lead risk management and governance initiatives for client organizations. You will define risk treatments, build security roadmaps, and implement ISMS controls to achieve ISO27k certification while guiding client security maturity with strong advisory skills.

The role emphasizes collaboration with ICT project managers, IT directors, and client management, fostering trusted advisor relationships and continuous security improvement across

Qualifications

• Minimum 5+ years in cybersecurity with governance focus.
• Experience turning standards into ISMS controls.
• Strong communication and advisory skills.
• Bachelor or Master in IT, Economics or Law is preferred.

Responsabilités

• Identify client security environments and risks; develop risk treatment plans.
• Roll out security improvement roadmaps toward governance goals.
• Implement and manage ISMS and controls; support ISO27k certification.
• Advise clients and maintain relationships; communicate with stakeholders.

Connaissances

Cyber security experience

Project management

Risk management

Security standards knowledge

ISMS implementation

English and Dutch fluency

Formation

Bachelor’s or Master’s in IT/Economics/Law

Certifications (CISM/CISSP/CISA/CGEIT/ISO27k Lead Implementor/Auditor)

Description du poste

ABOUT US

Join Toreon, the cybersecurity company that's all about empowering individuals and organizations in the field of cybersecurity. Our team of over 50 security domain experts is driven by knowledge and impact, partnering with companies to define and implement strategic security roadmaps. Through coaching, training, and collaboration, we increase our clients' security maturity, as well as our own expertise.

ABOUT THE CHALLENGE

Are you looking for an opportunity to expand your knowledge as a Chief Information Security Officer (CISO) and work on exciting security projects? Then, we have an offer for you!

Join our dedicated GRC and privacy team of around 20 Toreonites, and work with us to raise and maintain an organization's security maturity to a higher level. As a CISO, you will report to ICT project managers, IT directors, and client management. You will be responsible for rolling out a security improvement roadmap to achieve governance goals, such as ISO27k certification, and deploying the right technical measures.

Your role starts with identifying the security environment and risks of customers. You will use risk management to identify and prioritize security risks and create a risk treatment plan. Once the risks are mapped out, you will work out security strategies and convert them into a well-thought-out security roadmap.

As the CISO, you will implement and manage an information security management system (ISMS) and control measures. This will ensure that the technical and process-related security measures are recorded in the policies, processes, and standards, and that you succeed in structurally improving the organization's security maturity. In this process, you can also help the customers to obtain security certificates as a bonus.

You will be the trusted advisor of our customers, often communicating with the teams and management. Based on your strong communication skills and patience, you will build a good relationship with the customer and convince your audience of the security solutions you advise them.

Join us in our mission to make the world a safer place, expand your knowledge, and be part of exciting security projects!

INSIDE OUT

• You have excellent communication and persuasion skills that inspire customers and your team to exceed their goals.
• You have a constant desire to stay up-to-date within cyber security and training, and you ensure that your team always has the competitive edge.
• An inspiring advisor with strong people skills, adaptability, and motivational insights.
• Responsible and respectful professional with top-notch performance and discretion in handling sensitive information.
• Passionate learner and knowledge-sharer making a big impact in the business world.

PROFESSIONAL SKILLS

• 5+ years of cyber security experience
• Expertise in project management and balancing business objectives with security best practices
• Knowledge of security risk management methodologies (ISO27005, ISO31000, COSO, etc.)
• Familiarity with popular Security & Privacy standards and Governance Frameworks (ISO27001/2/12, NIST, CIS Controls, CyberFundamentals) and turn these standards into a working information security managementsystem (ISMS).
• Basic technical knowledge/experience in Identity, Access, Vulnerability and patch management, Cloud security, Security in the software development life cycle, and Network technology, experience in security domains, cryptography and public key infrastructure.
• Fluency in English and Dutch. French is a plus.

EDUCATIONAL REQUIREMENTS

As a candidate, possessing a relevant bachelor's or master's degree within IT, economics, or Law is highly desirable. Additionally, possessing one or more certifications such as CISM, CISSP, CISA, CGEIT, DPO, ISO27k Lead Implementor/Auditor, or any other technical certificates is considered a plus.

WHAT YOU CAN EXPECT

• A scaling-up cybersecurity company that's making a difference in the world
• A fun, educational environment where knowledge sharing is king
• A team that loves to work hard and play hard
• An open feedback culture that values your input
• Room for your own initiatives and plenty of opportunities to grow
• A learning path and expansive training budget to help you achieve your goals
• A flexible work environment that respects your work-life balance

And, of course, we offer you an attractive salary package, a team you can learn from and you will be supported in obtaining certificates and other training.