Expert Cybersecurity

Rhox; Zwijnaarde; On-site; EUR 90,000 - 130,000; Full time

Job summary

Rhox is seeking a senior cybersecurity expert to build and maintain an Information Security Management System (ISMS) and to support ISO 27001 certification, while aligning with NIS2 requirements. You will guide security partners, raise security awareness and report risks and progress to the ICT director, collaborating closely with the DPO.

The role focuses on maintaining policies, conducting risk assessments, audits, incident coordination and governance across security operations and supplier

Qualifications

• At least five years in information security, cybersecurity or ICT risk management.
• Thorough knowledge of ISO 27001, NIS2 and CyberFundamentals (CyFun).
• Experience with risk management, audits, compliance and ISMS implementation or management.
• Understanding of infrastructure, cloud, identity services and security tooling.
• Knowledge of security operations, vulnerability management, supplier management and incident management.
• An analytical, structured approach, turning complex security issues into practical actions.
• Ability to communicate with operational teams, management and directors.
• Master's degree or equivalent relevant experience.
• Dutch, native.
• English, B2.

Responsibilities

• Maintain the ISMS, including policies, procedures, documentation and review cycles.
• Assess cybersecurity and supply-chain risks, maintaining the risk register.
• Prepare audits, maintaining the Statement of Applicability and supporting evidence.
• Coordinate security incidents under the Incident Response Plan and reporting obligations.
• Oversee partners' vulnerability management, patching, monitoring and identity & access management.
• Support security aspects of business continuity and disaster recovery.

Skills

Security risk management

ISMS implementation

Audits & compliance

Incident management

Vendor management

Analytical thinking

Stakeholder communication

Structured approach

Education

Master's degree or equivalent

Job description

We're looking for a senior cybersecurity expert to build and maintain an Information Security Management System (ISMS), support ISO 27001 certification and meet NIS2 requirements. You'll guide security partners, build security awareness and report risks and progress to the ICT director, working closely with the DPO.

What you'll do

• Maintain the ISMS, including policies, procedures, documentation and review cycles.
• Assess cybersecurity and supply-chain risks, maintaining the risk register.
• Prepare audits, maintaining the Statement of Applicability and supporting evidence.
• Coordinate security incidents under the Incident Response Plan and reporting obligations.
• Oversee partners' vulnerability management, patching, monitoring and identity & access management.
• Support security aspects of business continuity and disaster recovery.

What you bring

• At least five years in information security, cybersecurity or ICT risk management.
• Thorough knowledge of ISO 27001, NIS2 and CyberFundamentals (CyFun).
• Experience with risk management, audits, compliance and ISMS implementation or management.
• Understanding of infrastructure, cloud, identity services and security tooling.
• Knowledge of security operations, vulnerability management, supplier management and incident management.
• An analytical, structured approach, turning complex security issues into practical actions.
• Ability to communicate with operational teams, management and directors.
• Master's degree or equivalent relevant experience.
• Dutch, native.
• English, B2.

Nice to have

• An ICT or business-related academic background.
• CISSP, CISM, ISO 27001 Lead Implementer or ISO 27001 Lead Auditor certification.
• Experience in healthcare or protecting sensitive personal data.

Good to know

• A full-time or 80% schedule is possible.