Expert Cybersecurity

In4Matic; Oost-Vlaanderen; On-site; EUR 70,000 - 100,000; Full time

Job summary

In4Matic is seeking an experienced Cybersecurity Expert to strengthen its information security strategy and resilience. You will own and mature the ISMS, drive ISO 27001 initiatives, and align governance and compliance across the organization.

With at least five years in cybersecurity, you will lead risk management, audits, and supplier security assessments, and communicate security priorities to senior management. On-site presence is required two days per week (Tuesday and Thursday).

Qualifications

• Master's degree in ICT or business administration or equivalent experience.
• 5+ years in cybersecurity, information security, or ICT risk management.
• Strong knowledge of ISO 27001, NIS2, and CyberFundamentals (CyFun).
• Experience with ISMS, risk management, audits, and compliance.

Responsibilities

• Manage and continuously improve the Information Security Management System (ISMS).
• Lead and support ISO 27001 certification initiatives.
• Identify, assess and monitor information security risks and maintain the risk register.
• Report on security risks, incidents, KPIs and progress to management.
• Ensure compliance with ISO 27001, NIS2, CyFun and related regulations.
• Coordinate internal and external audits and maintain the Statement of Applicability.
• Maintain the Incident Response Plan and coordinate incident management.
• Contribute to business continuity and disaster recovery planning from an information security perspective.
• Assess supplier and supply-chain risks and monitor security requirements for partners.
• Coordinate external security specialists and manage vulnerability, patch, monitoring, and IAM processes.
• Promote security awareness through training and targeted communications.
• Advise management on security priorities and ongoing improvement initiatives.

Skills

Risk management

Audits

ISMS implementation

Security governance

Incident management

Stakeholder comms

ISO 27001

Education

Master's degree in ICT/Business Admin

Job description

We're looking for an experienced Cybersecurity Expert to join our client's team and help strengthen its information security strategy and overall digital resilience. This is an opportunity to combine strategic thinking with hands-on security management, taking ownership of key initiatives that protect systems, data, and business processes. You'll play a central role in maturing the organisation's security framework, strengthening governance and compliance, and driving progress towards ISO 27001 certification.

Key Responsibilities

• Manage and continuously improve the Information Security Management System (ISMS), including policies, procedures, documentation, and review cycles.
• Lead and support initiatives towards ISO 27001 certification, ensuring alignment with relevant security standards and regulatory requirements.
• Identify, assess, and monitor information security risks, maintain the risk register, and define appropriate mitigation measures.
• Report on security risks, incidents, KPIs, and progress to management and relevant governance bodies.
• Ensure compliance with applicable frameworks and regulations, including ISO 27001, NIS2, and CyberFundamentals (CyFun).
• Prepare and coordinate internal and external audits, maintain the Statement of Applicability, and ensure audit evidence is properly documented.
• Maintain the Incident Response Plan and coordinate incident management, investigation, and follow-up actions.
• Contribute to business continuity and disaster recovery planning from an information security perspective.
• Assess supplier and supply-chain risks and monitor security requirements for critical external partners.
• Coordinate external security specialists and follow up on vulnerability management, patch management, security monitoring, and identity and access management.
• Promote security awareness through communication, training, and targeted awareness initiatives.
• Advise management and business stakeholders on security priorities, emerging risks, and ongoing improvement initiatives.

Your Profile

• Master's degree, preferably in ICT or business administration, or equivalent professional experience.
• At least five years of experience in cybersecurity, information security, or ICT risk management.
• Strong knowledge of security frameworks and standards, particularly ISO 27001, NIS2, and CyberFundamentals (CyFun).
• Proven experience with risk management, audits, compliance, and the implementation or management of an ISMS.
• Good understanding of modern IT environments, including infrastructure, cloud services, identity management, and security solutions.
• Familiarity with security operations, vulnerability and incident management, and supplier security assessments.
• Experience in healthcare or in protecting sensitive personal data is a strong asset.
• Excellent analytical and organisational skills, with the ability to translate complex security requirements into practical recommendations and actionable plans.
• Strong communication skills and the ability to engage effectively with operational teams, business stakeholders, and senior management.
• Certifications such as CISSP, CISM, ISO 27001 Lead Implementer, or ISO 27001 Lead Auditor are considered a plus.
• Fluent Dutch and a good command of English.

Practical Information

• Workload: Full-time or 4/5 employment.
• On-site presence: At least two days per week, with fixed office days on Tuesday and Thursday.

If you're passionate about cybersecurity and enjoy combining governance, risk management, and practical security improvements, this role offers the opportunity to make a meaningful contribution to an organisation's long-term security maturity and resilience.

Contactperson & Reference

• Reference #: INW28368
• Marilyn Weytens
• [e-mail]