Cybersecurity Awareness Expert

Keystone Solutions; Brussel; Hybride; EUR 100 000 - 134 000; Plein temps

Résumé du poste

Keystone Solutions is seeking a Cybersecurity Awareness Expert for a consultancy mission at a client site with a federal police organization. You will evaluate and enhance the current awareness strategy, interview stakeholders, and map risks to design concrete improvements including campaigns and phishing simulations.

Reporting to the CISO, you will present findings to management and ensure knowledge transfer at mission end. This is a full-time hybrid assignment starting mid-October 2026.

Qualifications

• Benchmark against standards and frameworks (ISO 27001 Annex A, NIST, ENISA).
• Design awareness campaigns, phishing simulations and training programs.
• Knowledge of behavior change and communication in security awareness.
• Evaluate and redevelop cybersecurity awareness strategies and programs.
• Communicate clearly to management/CISO during a short assignment.

Responsabilités

• Provide an objective assessment of the current awareness strategy and develop a practical improvement plan.
• Organize interviews and workshops with stakeholders (HR, internal communication, IT, business).
• Evaluate awareness maturity against best practices and standards (ISO 27001 Annex A, NIST, ENISA).
• Identify target audiences and risky behaviors; map awareness needs.
• Develop a concrete improvement plan and awareness strategy (campaigns, phishing simulations, training, communication).
• Present findings and recommendations to the CISO and stakeholders.
• Ensure knowledge transfer to the CISO team at the end of the mission.

Connaissances

Benchmarking standards

Awareness campaigns

Phishing simulations

Security awareness programs

Change management communication

Cybersecurity strategy design

Formation

Master's degree or equivalent

Certifications asset: CISM, SANS MGT433/SSAP, CIPM

Description du poste

Mission Overview

Keystone Solutions is seeking a Cybersecurity Awareness Expert for a consultancy mission at a client site. This role involves evaluating and enhancing the existing cybersecurity awareness strategy for a federal police organization, reporting directly to the Chief Information Security Officer (CISO).

Key Responsibilities

• Provide an objective assessment of the current cybersecurity awareness strategy and develop a practical improvement plan.
• Organize interviews and workshops with stakeholders (HR, internal communication, IT, business).
• Evaluate awareness maturity against best practices and standards (e.g., ISO 27001 Annex A, NIST, ENISA).
• Identify target audiences and risky behaviors; map awareness needs.
• Develop a concrete improvement plan and awareness strategy (campaigns, phishing simulations, training, communication).
• Present findings and recommendations to the CISO and stakeholders.
• Ensure knowledge transfer to the CISO team at the end of the mission.

Knowledge Areas

• Security awareness and behavior change; communication strategies.
• Awareness frameworks and standards (ISO 27001 Annex A, NIST SP 800-50/53, ENISA).
• Phishing simulation and training platforms; campaign and content development.
• Overview of NIS 2 and GDPR (awareness obligations).

Communication and Collaboration

• Clear and persuasive communication to diverse audiences (management to end-users).
• Collaborate with the CISO, HR, internal communication, ICT services, and business.
• Fluency in Dutch or French is required; bilingualism is an asset; English is required.

Level and Experience

• Authoritative consultancy under broad direction (SFIA level 5 – Ensure, advise).
• Experienced expert in security awareness; autonomous from the start of a short mission; explicitly not a junior.

Education

• Master's degree or equivalent through confirmed relevant experience.
• Certifications are an asset (e.g., CISM, SANS MGT433/SSAP, CIPM).

Work Environment

• Status: Consultancy mission.
• Responsibility Level: SFIA level 5 – Ensure, advise (senior/expert).
• Reports to: CISO.
• Work Arrangement: Full-time; combination of office and remote work as per service agreements.
• Team: CISO office, in collaboration with HR, internal communication, and ICT services.

Duration

15/10/2026 - 31/12/2026 3 months (full time)

Skills required

• Benchmarking par rapport aux standards et frameworks (ISO 27001 Annexe A, NIST, ENISA) - Level: Expert - Most recent: Any time
• Concevoir des campagnes awareness, des simulations de phishing et des programmes de formation - Level: Expert - Most recent: Any time
• Connaissance du changement de comportement et de la communication dans le cadre de la security aware - Level: Expert - Most recent: Any time
• Évaluer et (re)développer des stratégies et programmes de sensibilisation à la cybersécurité - Level: Expert - Most recent: Any time
• Rendre compte clairement au niveau management/CISO, dans le cadre d’une mission courte - Level: Expert - Most recent: Any time

Language requirements

Dutch or French
Level Active knowledge
English
Level Active knowledge