Cybersecurity Awareness Expert

keystone-solutions; Brussel; Hybride; EUR 111 000 - 166 000; Plein temps

Résumé du poste

Keystone Solutions recherche un expert en sensibilisation à la cybersécurité pour une mission de conseil auprès d'une organisation policière fédérale. Vous évaluerez et améliorerez la stratégie de sensibilisation existante et présenterez des recommandations au CISO.

Vous mènerez des interviews et ateliers, développerez un plan d'amélioration et assurerez le transfert de connaissances à l'équipe CISO. Maîtrise des cadres ISO/NIST/ENISA et capacité à communiquer avec des publics variés.

Qualifications

• Benchmarking par rapport aux standards ISO 27001 Annexe A, NIST et ENISA.
• Concevoir des campagnes awareness et des simulations de phishing.
• Connaissance du changement de comportement et de la communication dans la sécurité.
• Évaluer et développer des stratégies et programmes de sensibilisation.
• Rendre compte au management/CISO lors d'une mission courte.

Responsabilités

• Évaluer la stratégie de sensibilisation existante et proposer un plan d'amélioration.
• Organiser des entretiens et ateliers avec les parties prenantes (RH, communication interne, IT, métiers).
• Évaluer la maturité de la sensibilisation selon ISO/NIST/ENISA.
• Identifier les publics cibles et les comportements à risque; cartographier les besoins.
• Présenter les résultats et recommandations au CISO et aux parties prenantes.
• Assurer le transfert de connaissances à l'équipe CISO en fin de mission.

Connaissances

Benchmarking

Campaign design

Awareness strategy

Phishing simulations

Management reporting

Formation

Master ou équivalent

CISM

SANS MGT433/SSAP

CIPM

Outils

Plateformes de phishing

Outils de formation

Description du poste

Mission Overview

Keystone Solutions is seeking a Cybersecurity Awareness Expert for a consultancy mission at a client site. This role involves evaluating and enhancing the existing cybersecurity awareness strategy for a federal police organization, reporting directly to the Chief Information Security Officer (CISO).

Key Responsibilities

• Provide an objective assessment of the current cybersecurity awareness strategy and develop a practical improvement plan.
• Organize interviews and workshops with stakeholders (HR, internal communication, IT, business).
• Evaluate awareness maturity against best practices and standards (e.g., ISO 27001 Annex A, NIST, ENISA).
• Identify target audiences and risky behaviors; map awareness needs.
• Develop a concrete improvement plan and awareness strategy (campaigns, phishing simulations, training, communication).
• Present findings and recommendations to the CISO and stakeholders.
• Ensure knowledge transfer to the CISO team at the end of the mission.

Knowledge Areas

• Security awareness and behavior change; communication strategies.
• Awareness frameworks and standards (ISO 27001 Annex A, NIST SP 800-50/53, ENISA).
• Phishing simulation and training platforms; campaign and content development.
• Overview of NIS 2 and GDPR (awareness obligations).

Communication and Collaboration

• Clear and persuasive communication to diverse audiences (management to end-users).
• Collaborate with the CISO, HR, internal communication, ICT services, and business.
• Fluency in Dutch or French is required; bilingualism is an asset; English is required.

Level and Experience

• Authoritative consultancy under broad direction (SFIA level 5 – Ensure, advise).
• Experienced expert in security awareness; autonomous from the start of a short mission; explicitly not a junior.

Education

• Master's degree or equivalent through confirmed relevant experience.
• Certifications are an asset (e.g., CISM, SANS MGT433/SSAP, CIPM).

Work Environment

• Status: Consultancy mission.
• Responsibility Level: SFIA level 5 – Ensure, advise (senior/expert).
• Reports to: CISO.
• Work Arrangement: Full-time; combination of office and remote work as per service agreements.
• Team: CISO office, in collaboration with HR, internal communication, and ICT services.

Duration

15/10/2026 - 31/12/2026 3 months (full time)

Skills required

• Benchmarking par rapport aux standards et frameworks (ISO 27001 Annexe A, NIST, ENISA) - Level: Expert - Most recent: Any time
• Concevoir des campagnes awareness, des simulations de phishing et des programmes de formation - Level: Expert - Most recent: Any time
• Connaissance du changement de comportement et de la communication dans le cadre de la security aware - Level: Expert - Most recent: Any time
• Évaluer et (re)développer des stratégies et programmes de sensibilisation à la cybersécurité - Level: Expert - Most recent: Any time
• Rendre compte clairement au niveau management/CISO, dans le cadre d’une mission courte - Level: Expert - Most recent: Any time

Language requirements

Dutch or French
Level Active knowledge
English
Level Active knowledge