Cybersecurity Specialist Security Awareness (Senior)

Rhox; Brussel; Sur place; EUR 100 000 - 179 000; Plein temps

Résumé du poste

Rhox is seeking a senior cybersecurity awareness specialist to review and improve its security awareness programme within an ISO 27001 aligned ISMS. Reporting to the CISO, you will assess current maturity and shape a practical, behaviour-based awareness plan including phishing simulations, training, and clear communication.

The assignment lasts about two months and involves interviewing HR, internal communications, ICT and business stakeholders, producing an assessment, renewed strategy, action

Qualifications

• Senior expertise in security awareness, behaviour change and communication strategies.
• Experience evaluating and redeveloping cybersecurity awareness strategies and programmes.
• Ability to benchmark practices against ISO 27001 Annex A, NIST SP 800-50/53 and ENISA guidance.
• Experience designing awareness campaigns, phishing simulations, training and communication content.
• Knowledge of phishing simulation and training platforms.
• Understanding of NIS 2 and GDPR awareness obligations.
• Clear, convincing communication with management, the CISO and end users.
• Autonomous delivery at SFIA level 5, Ensure, advise, during a short assignment.

Responsabilités

• Assess the existing cybersecurity awareness strategy, programmes and delivery resources.
• Benchmark awareness maturity against ISO 27001 Annex A, NIST and ENISA guidance.
• Conduct interviews and workshops with HR, internal communications, ICT and business stakeholders.
• Identify target audiences, risky behaviours and their security awareness needs.
• Develop a renewed strategy and practical improvement plan.
• Recommend campaigns, phishing simulations, training and communication activities.
• Present findings to the CISO and management, then transfer knowledge to CISO colleagues.

Connaissances

Security awareness

Behaviour change

Communication strategies

ISO 27001 Annex A benchmarking

NIST/ENISA guidance

Phishing simulations

Campaign design

Training content

End-user communications

SFIA level 5 delivery

Formation

Master’s degree or relevant experience

Outils

Phishing simulation platforms

Description du poste

A federal public service is reviewing its cybersecurity awareness approach within an information security management system aligned with ISO 27001. Reporting to the CISO, this senior specialist assesses current maturity and shapes a practical security awareness programme centred on behaviour change, phishing simulations, training and clear communication.

The mission

This short assignment provides an objective review of the existing security awareness strategy, programmes and resources. You will benchmark maturity against ISO 27001 Annex A, NIST and ENISA, identify gaps, and turn the findings into a realistic improvement plan.

You will work with HR, internal communications, ICT and business stakeholders through interviews and workshops. Your outputs will include an assessment report, a renewed strategy, programme recommendations, an action plan and an executive summary for the CISO and management. The assignment lasts approximately two months, while final follow-up, deployment and decision-making remain with the CISO.

Your responsibilities

• Assess the existing cybersecurity awareness strategy, programmes and delivery resources.
• Benchmark awareness maturity against ISO 27001 Annex A, NIST and ENISA guidance.
• Conduct interviews and workshops with HR, internal communications, ICT and business stakeholders.
• Identify target audiences, risky behaviours and their security awareness needs.
• Develop a renewed strategy and practical improvement plan.
• Recommend campaigns, phishing simulations, training and communication activities.
• Present findings to the CISO and management, then transfer knowledge to CISO colleagues.

Your profile

Essential skills

• Senior expertise in security awareness, behaviour change and communication strategies.
• Experience evaluating and redeveloping cybersecurity awareness strategies and programmes.
• Ability to benchmark practices against ISO 27001 Annex A, NIST SP 800-50/53 and ENISA guidance.
• Experience designing awareness campaigns, phishing simulations, training and communication content.
• Knowledge of phishing simulation and training platforms.
• Understanding of NIS 2 and GDPR awareness obligations.
• Clear, convincing communication with management, the CISO and end users.
• Autonomous delivery at SFIA level 5, Ensure, advise, during a short assignment.

Preferred skills

• CISM, SANS MGT433/SSAP or CIPM certification.

Languages

• Dutch, B2.
• French, B2.
• English, B2.

Education

• Master’s degree, or equivalent confirmed relevant experience.

Working context

• Reports to the CISO, with final follow-up and deployment decisions retained there.
• Works under broad direction and provides authoritative advice at SFIA level 5, Ensure, advise.
• Collaborates with HR, internal communications, ICT and business stakeholders.