Consultant Senior

Rhox; Brussel; On-site; EUR 75,000 - 115,000; Full time

Job summary

Rhox is seeking aSenior Consultant to guide cyber controls across software projects in Belgium. You will drive control requirements from design, review controls with delivery teams, and coordinate NIST evidence collection to ensure ISO 27001 compliance.

You will assess changes, support release decisions, and report progress to IT management. The role requires five+ years in IT/security, SDLC knowledge, and ISO 27001/NIST expertise, with strong communication and autonomy.

Qualifications

• 5+ years in IT production, networks, or related roles
• Good understanding of SDLC activities
• Solid knowledge of NIST and ISO 27001 frameworks
• Experience with network protection and IT risk assessment/management

Responsibilities

• Incorporate control requirements into projects from design
• Review application control forms with delivery teams
• Assess changes and support release go/no-go decisions
• Collect NIST evidence from SMEs
• Submit NIST evidence and agree acceptance criteria with reviewers
• Report control progress and raise issues to IT management

Skills

Five years of IT production/Networks

SDLC knowledge

NIST & ISO 27001 familiarity

Network protection & IT risk

Autonomy & clear communication

Education

Bachelor's/Master's degree

ISO 27001 certification

Job description

We're looking for a senior consultant to guide cyber controls across software projects and coordinate NIST evidence. You'll assess application changes, challenge control measures, and help teams meet ISO 27001 and NIST requirements.

What you'll do:

• Build control requirements into projects from the design stage.


• Review application control forms with delivery teams.


• Assess changes and support release go/no-go decisions.


• Collect NIST control evidence from subject matter experts.


• Submit NIST evidence and agree acceptance criteria with reviewers.


• Report control progress and raise issues to IT management.

What you bring:

• Five years of relevant experience in IT production, networks, or technical or functional roles.


• Software development experience and a good understanding of SDLC activities.


• Good understanding of NIST and ISO 27001 frameworks.


• Knowledge of network protection and IT risk assessment and management.


• Dutch or French at C1, and English at B2.


• A Bachelor's or Master's degree, plus relevant experience.


• ISO 27001 or equivalent certification.


• Autonomy, clear communication, sound analysis, and collaborative working.

Nice to have:

• Application architecture knowledge, including n-tier and client-server.


• Experience applying cyber controls in projects.