CyberSecurity Expert Dutch

Phoenix Technologies; Brussel Hoofdstad; On-site; EUR 70,000 - 110,000; Full time

Job summary

Phoenix Technologies in Brussels, Belgium seeks an experienced Information Security Manager to lead the development and maintenance of the ISMS and drive the journey toward ISO 27001 certification. You will manage risk, oversee audits, incidents, business continuity, and supplier security, while strengthening awareness through training and cross‑functional collaboration with stakeholders.

The role requires five years of experience and deep knowledge of ISO 27001, NIS2 and CyberFundamentals, with

Qualifications

• Master's degree in ICT-related or business field or equivalent experience.
• Minimum 5 years in information security, cybersecurity or ICT risk management.
• Deep knowledge of ISO 27001, NIS2 and CyberFundamentals.
• Experience with risk management, audits and operating an ISMS.
• Strong analytical and communication skills to engage stakeholders.

Responsibilities

• Manage and continuously develop the ISMS, including policies and reviews.
• Identify, analyze and track cybersecurity risks and report to governance.
• Oversee compliance with ISO 27001, NIS2, CyberFundamentals and audits.
• Maintain the Incident Response Plan and coordinate security incidents.
• Contribute to business continuity and disaster recovery with a security focus.
• Assess supplier and supply-chain risks and monitor critical partners.
• Manage external security partners and monitor IAM, patches and vulnerabilities.
• Strengthen security awareness through training and campaigns.

Skills

ISMS management

Risk management

Audits

ISO 27001

Communication

Stakeholder engagement

Cybersecurity

Education

Master's degree

Job description

We are seeking an experienced Information Security Manager to join our team. You will lead the development and maintenance of our ISMS and drive our journey towards ISO 27001 certification while ensuring compliance with relevant standards.

Key responsibilities

• Manage and continuously develop the Information Security Management System (ISMS), including policies, processes, documentation, and review cycles.

• Identify, analyze, and track cybersecurity risks, maintain the risk register, and report to governance bodies.

• Oversee compliance with ISO 27001, NIS2, CyberFundamentals and prepare for and conduct internal and external audits.

• Maintain the Incident Response Plan, coordinate security incidents and ensure proper follow-up and reporting.

• Contribute to business continuity and disaster recovery initiatives with a focus on security.

• Assess supplier and supply-chain risks, monitor security requirements of critical partners.

• Manage external security partners and monitor vulnerability, patch, monitoring, and IAM activities.

• Strengthen security awareness through training, sensitization and campaigns.

Required qualifications

• Master's degree in an ICT-related or business-oriented field (or equivalent experience).

• At least five years of demonstrable experience in information security, cybersecurity or ICT risk management.

• Deep knowledge of information security frameworks and standards such as ISO 27001, NIS2 and CyberFundamentals.

• Proven experience with risk management, audits, compliance and operating an ISMS.

• Strong analytical and communication skills, with ability to engage stakeholders at all organizational levels.

Nice to have

• Experience in the healthcare sector or handling sensitive personal data.

• Fluency in Dutch and strong English proficiency.

• Relevant certifications such as CISSP, CISM, ISO 27001 Lead Implementer or Lead Auditor.