Expert Cybersecurity Consultant

Keystone Solutions; Belgique; Hybrid; EUR 90,000 - 130,000; Full time

Job summary

Keystone Solutions is seeking an Expert Cybersecurity to join our consultancy mission at a client site in Belgium. You will lead ISMS development, implement ISO 27001, oversee risk management, and ensure compliance with NIS2 and CyFundamentals while aligning security with healthcare services.

The role combines hands-on security operations with strategic reporting to management, including KPI dashboards, incident management, and supplier risk assessments.

Qualifications

• Master's degree in ICT-related or business administration or equivalent.
• 5+ years in information security, cybersecurity or ICT risk management.
• Thorough knowledge of ISO 27001, NIS2 and CyFun.
• Experience with risk management, audits, compliance and ISMS.
• Understanding of modern IT environments including cloud and identity security.
• Certifications such as CISSP, CISM or ISO 27001 Lead Implementer/Auditor are assets.

Responsibilities

• Develop, implement and monitor cybersecurity and information security programs.
• Manage ISMS, policies, processes, documentation and audits toward ISO 27001.
• Identify, analyze and report cybersecurity risks and maintain risk register.
• Ensure compliance with ISO 27001, NIS2 and CyFun, and support audits.
• Oversee vulnerability management, patching, monitoring and IAM.
• Lead security awareness programs and executive reporting on KPIs and risks.
• Coordinate with external security partners and suppliers on security requirements.

Skills

Audit Expertise

CyberFundamentals

Incident Management

ISMS

ISO27001

NIS2

Risk Management

Security Tooling

Education

Master's degree in ICT-related or business administration

Job description

Mission Overview:

Keystone Solutions is seeking an Expert Cybersecurity to join our consultancy mission at a client site. In this role, you will ensure that healthcare and welfare services remain digitally secure, reliable, and resilient in the face of increasing cyber threats. You will actively contribute to the development of secure systems, reliable data, and robust processes that protect the organization and its services.

Key Responsibilities:

As an Expert Cybersecurity, you will play a central role in the development, implementation, and monitoring of cybersecurity and information security. Your responsibilities will include:

• Managing and further developing the Information Security Management System (ISMS), including policies, processes, procedures, documentation, and review cycles, while leading the path towards ISO 27001 certification.
• Identifying, analyzing, and monitoring cybersecurity risks, managing the risk register, and periodically reporting to relevant committees.
• Ensuring compliance with relevant standards and regulations, including ISO 27001, NIS2, and CyberFundamentals (CyFun), and preparing and guiding audits.
• Managing the Statement of Applicability and audit documentation to ensure the organization remains audit-ready.
• Maintaining the Incident Response Plan, coordinating security incidents, and ensuring proper follow-up on reporting obligations and improvement actions.
• Contributing to business continuity and disaster recovery initiatives, with a focus on security aspects.
• Assessing supplier and supply chain risks and ensuring compliance with security requirements among critical partners.
• Directing external security partners and monitoring follow-up on vulnerability management, patch management, monitoring, and identity & access management.
• Enhancing security awareness within the organization through training, education, and awareness campaigns.
• Supporting management and executives with clear reporting on KPIs, risks, incidents, and the progress of cybersecurity initiatives.

Candidate Profile:

We are looking for an experienced cybersecurity expert who thrives in a developing organization. You combine strong technical expertise with a pragmatic approach and are energized by building and embedding cybersecurity within a complex organizational context. You should identify with the following profile:

• Master's degree, preferably in an ICT-related or business administration field, or equivalent through relevant experience.
• At least 5+ years of demonstrable experience in information security, cybersecurity, or ICT risk management.
• Thorough knowledge of information security frameworks and standards such as ISO 27001, NIS2, and CyberFundamentals (CyFun).
• Experience with risk management, audits, compliance, and establishing or managing an ISMS.
• Understanding of modern IT environments, including infrastructure, cloud, identity, and security services.
• Insight into security operations, vulnerability management, supplier management, and incident management.
• Certifications such as CISSP, CISM, ISO 27001 Lead Implementer, or ISO 27001 Lead Auditor are a strong asset.
• Strong analytical skills, structured work approach, and ability to translate complex issues into actionable steps and advice.
• Ability to engage stakeholders at various levels and smoothly transition between operational teams, management, and executives.
• Experience in the healthcare sector or with the protection of sensitive personal data is a plus.
• Fluent communication in Dutch and a good command of English.

Practical Information:

The work regime can be part-time (4/5) or full-time, with at least 2 days in the office on fixed days, Tuesday and Thursday.

Duration: As soon as possible - 18/12/2026 3 months (full time)

Skills required:

• Audit Expertise - Level: Advanced - Most recent: 1 to 3 years ago
• CyberFundamentals - Level: Advanced - Most recent: Any time
• Incident Management - Level: Advanced - Most recent: Any time
• ISMS - Level: Intermediate - Most recent: Any time
• ISO27001 - Level: Advanced - Most recent: Any time
• NIS2 - Level: Advanced - Most recent: Any time
• Risk Management - Level: Advanced - Most recent: Any time
• Security Tooling - Level: Intermediate - Most recent: Any time

Language requirements:

Dutch
Level Native or bilingual proficiency
English
Level Professional working proficiency