Cyber Asset Management Lead

Rhox; Brussel; Sur place; EUR 70 000 - 110 000; Plein temps

Résumé du poste

Rhox is seeking an Asset Management Expert in Cybersecurity to assess how IT, cloud, OT and information assets are inventoried, classified and managed in Brussels. You will map asset management, audit CMDBs and discovery tools, and interview stakeholders to benchmark against ISO 27001 Annex A, CyFun and NIST.

You will prioritise risks from unmanaged or unpatched assets and present an improvement roadmap to security leadership, transferring knowledge to teams.

Qualifications

• Minimum requirement: senior asset management expertise with the ability to advise under broad direction (SFIA level 5).
• Experience assessing asset management practices and asset registers.
• Knowledge of asset discovery, classification, ownership and lifecycle management for IT, cloud and OT assets.

Responsabilités

• Map current asset management across hardware, software, data, cloud and OT.
• Assess asset registers, CMDBs and discovery tools for coverage and accuracy.
• Interview infrastructure, application management and security stakeholders about current practices.
• Compare practices with ISO 27001 Annex A, CyFun and NIST.
• Prioritise risks linked to unmanaged, obsolete or unpatched assets.
• Present an improvement roadmap, brief security leaders and transfer knowledge.

Connaissances

Senior asset management

Risk assessment

ISO 27001 Annex A

CyFun

NIST SP 800-53

CMDB and asset discovery tools

Stakeholder communication

Dutch or French (B2)

English (B2)

Formation

Master's degree or equivalent relevant experience

Outils

CMDB

Asset discovery tools

Discovery tools

Description du poste

Rhox is seeking an Asset Management Expert in Cybersecurity to assess how IT, cloud, OT and information assets are inventoried, classified and managed in Brussels. You will map asset management, audit CMDBs and discovery tools, and interview stakeholders to benchmark against ISO 27001 Annex A, CyFun and NIST.

You will prioritise risks from unmanaged or unpatched assets and present an improvement roadmap to security leadership, transferring knowledge to teams.