Cybersecurity Awareness Expert

HumanInTech; Brussel Hoofdstad; Hybride; EUR 90 000 - 140 000; Plein temps

Résumé du poste

HumanInTech is seeking a senior security awareness expert to assess and improve the organization's cybersecurity awareness strategy for a Belgian public-sector client. Based in Brussels with hybrid work, you will lead evaluations, stakeholder workshops, and maturity benchmarking against ISO 27001 Annex A, NIST, and ENISA.

This two-month assignment requires 6–10 years of experience, a master's degree, and fluency in English with Dutch or French as an asset.

Qualifications

• Expert-level experience evaluating and developing cybersecurity awareness strategies and programmes.
• Expert knowledge of behaviour change and communication in security awareness.
• Expert ability to design awareness campaigns, phishing simulations and training programmes.
• Expert knowledge of benchmarking against standards and frameworks (ISO 27001 Annex A, NIST, ENISA).
• Ability to report clearly to management and CISO level within a short assignment.
• Broad understanding of NIS 2 and GDPR (awareness obligations).
• Strong communication skills towards varied audiences, from management to end users.
• Experience collaborating with CISOs, HR, internal communications, ICT services and business units.
• Active knowledge of Dutch or French; bilingualism is an asset; Active knowledge of English.

Responsabilités

• Evaluate the existing awareness strategy, programmes and resources.
• Organise interviews and workshops with stakeholders (HR, internal communications, IT, business units).
• Assess awareness maturity against best practices and standards (ISO 27001 Annex A, NIST, ENISA).
• Identify target audiences and risk behaviours; map awareness needs.
• Develop a concrete improvement plan and awareness strategy (campaigns, phishing simulations, training, communications).
• Present findings and recommendations to the CISO and stakeholders.
• Ensure knowledge transfer to the CISO's team at the end of the assignment.
• Deliver assessment reports, maturity evaluations, renewed strategy and executive summary.

Connaissances

Cybersecurity awareness

Behaviour change

Campaign design

Phishing simulations

Stakeholder interviews

Management reporting

Standards benchmarking

NIS 2 & GDPR knowledge

Cross-functional collaboration

Dutch/French

English fluent

Formation

Master's degree

Description du poste

What you will do

You will work for the Chief Information Security Officer (CISO) of a Belgian public-sector organisation, conducting an objective assessment of the current cybersecurity awareness strategy and developing a practical improvement plan as the foundation for a structural awareness programme.

Your main tasks:

• Evaluate the existing awareness strategy, programmes and resources
• Organise interviews and workshops with stakeholders (HR, internal communications, IT, business units)
• Assess awareness maturity against best practices and standards (ISO 27001 Annex A, NIST, ENISA)
• Identify target audiences and risk behaviours; map awareness needs
• Develop a concrete improvement plan and awareness strategy (campaigns, phishing simulations, training, communications)
• Present findings and recommendations to the CISO and stakeholders
• Ensure knowledge transfer to the CISO's team at the end of the assignment

You will deliver:

• Assessment report of the existing awareness strategy and approach
• Awareness maturity evaluation against best practices and standards
• Renewed, evidence-based awareness strategy and action plan
• Recommendations for the awareness programme (campaigns, phishing simulations, training, communications)
• Executive summary for the CISO and management

What we are looking for

You are a senior expert in security awareness with the autonomy to hit the ground running on a short assignment. You have:

• Expert-level experience in evaluating and developing cybersecurity awareness strategies and programmes
• Expert knowledge of behaviour change and communication in the context of security awareness
• Expert ability to design awareness campaigns, phishing simulations and training programmes
• Expert knowledge of benchmarking against standards and frameworks (ISO 27001 Annex A, NIST, ENISA)
• Expert ability to report clearly to management and CISO level within a short assignment
• Broad understanding of NIS 2 and GDPR (awareness obligations)
• Strong communication skills towards varied audiences, from management to end users
• Experience collaborating with CISOs, HR, internal communications, ICT services and business units
• Active knowledge of Dutch or French; bilingualism is an asset
• Active knowledge of English

You hold a master's degree or equivalent through confirmed relevant experience. Certifications such as CISM, SANS MGT433/SSAP or CIPM are an asset.

This is explicitly not a junior role. You work at SFIA level 5 (Ensure, advise), providing authoritative advice under broad direction.

The setting

This assignment runs from 15 October 2026 to 31 December 2026, approximately two months in total. You will be based in Brussels with a hybrid working arrangement combining office and remote work according to service agreements.

You will report to the CISO and work within the CISO's office, collaborating with HR, internal communications and ICT services. The assignment is part of an ISO 27001 ISMS/GRC initiative. Final responsibility for follow-up, deployment and decisions remains with the CISO.

You can join us for this assignment as a freelancer or as an employee of HumanInTech. Same role, same team. If you join as an employee, your employment continues beyond this assignment. When it ends, we’ll work together to find your next assignment.

Location: Brussels, hybrid

Employer / contracting party: HumanInTech

Applications close (Brussels time): September 29, 2026 at 2:00 AM

Engagement: Freelance or employed by HumanInTech

Working hours: Full-time

Experience: 6–10 years or more

Education: Master's or more

Published: September 2026