Expert Cybersecurity Consultant

Keystone Solutions; Oost-Vlaanderen; On-site; EUR 90,000 - 130,000; Full time

Job summary

Keystone Solutions is seeking an Expert Cybersecurity to join our consultancy mission at a client site in Belgium. You will lead the development, implementation, and monitoring of cybersecurity and information security to keep healthcare services secure, reliable, and resilient against threats.

The role requires 5+ years in information security and a strong command of ISO 27001, NIS2, and CyFun. You will drive risk management, audits, ISMS, and security awareness across multiple stakeholders

Qualifications

• Master's degree or equivalent with 5+ years of information security experience.
• Strong knowledge of ISO 27001, NIS2, and CyFun frameworks.
• Experience with risk management, audits, and ISMS governance.
• Understanding modern IT environments, cloud, identity, and security services.
• Experience in healthcare data protection is a plus.

Responsibilities

• Lead ISMS development, implementation, and auditing.
• Manage risk register and report to committees.
• Ensure compliance with ISO 27001, NIS2, CyFun and audits.
• Coordinate vulnerability management, patching, and IAM.
• Develop security awareness and KPI reporting for leadership.

Skills

ISMS

ISO 27001

NIS2

Risk Mgmt

Incident Mgmt

CyFun

Audit Expertise

Security Tooling

Stakeholder Mgmt

Healthcare Data

Education

Master's degree in ICT or related field

Job description

Mission Overview

Keystone Solutions is seeking an Expert Cybersecurity to join our consultancy mission at a client site. In this role, you will ensure that healthcare and welfare services remain digitally secure, reliable, and resilient in the face of increasing cyber threats. You will actively contribute to the development of secure systems, reliable data, and robust processes that protect the organization and its services.

Key Responsibilities

As an Expert Cybersecurity, you will play a central role in the development, implementation, and monitoring of cybersecurity and information security. Your responsibilities will include:

• Managing and further developing the Information Security Management System (ISMS), including policies, processes, procedures, documentation, and review cycles, while leading the path towards ISO 27001 certification.
• Identifying, analyzing, and monitoring cybersecurity risks, managing the risk register, and periodically reporting to relevant committees.
• Ensuring compliance with relevant standards and regulations, including ISO 27001, NIS2, and CyberFundamentals (CyFun), and preparing and guiding audits.
• Managing the Statement of Applicability and audit documentation to ensure the organization remains audit-ready.
• Maintaining the Incident Response Plan, coordinating security incidents, and ensuring proper follow-up on reporting obligations and improvement actions.
• Contributing to business continuity and disaster recovery initiatives, with a focus on security aspects.
• Assessing supplier and supply chain risks and ensuring compliance with security requirements among critical partners.
• Directing external security partners and monitoring follow-up on vulnerability management, patch management, monitoring, and identity & access management.
• Enhancing security awareness within the organization through training, education, and awareness campaigns.
• Supporting management and executives with clear reporting on KPIs, risks, incidents, and the progress of cybersecurity initiatives.

Candidate Profile

We are looking for an experienced cybersecurity expert who thrives in a developing organization. You combine strong technical expertise with a pragmatic approach and are energized by building and embedding cybersecurity within a complex organizational context. You should identify with the following profile:

• Master's degree, preferably in an ICT-related or business administration field, or equivalent through relevant experience.
• At least 5+ years of demonstrable experience in information security, cybersecurity, or ICT risk management.
• Thorough knowledge of information security frameworks and standards such as ISO 27001, NIS2, and CyberFundamentals (CyFun).
• Experience with risk management, audits, compliance, and establishing or managing an ISMS.
• Understanding of modern IT environments, including infrastructure, cloud, identity, and security services.
• Insight into security operations, vulnerability management, supplier management, and incident management.
• Certifications such as CISSP, CISM, ISO 27001 Lead Implementer, or ISO 27001 Lead Auditor are a strong asset.
• Strong analytical skills, structured work approach, and ability to translate complex issues into actionable steps and advice.
• Ability to engage stakeholders at various levels and smoothly transition between operational teams, management, and executives.
• Experience in the healthcare sector or with the protection of sensitive personal data is a plus.
• Fluent communication in Dutch and a good command of English.

Practical Information

The work regime can be part-time (4/5) or full-time, with at least 2 days in the office on fixed days, Tuesday and Thursday.

Duration: As soon as possible - 18/12/2026 3 months.

Contract type: full time.

Skills required

• Audit Expertise - Level: Advanced - Most recent: 1 to 3 years ago
• CyberFundamentals - Level: Advanced - Most recent: Any time
• Incident Management - Level: Advanced - Most recent: Any time
• ISMS - Level: Intermediate - Most recent: Any time
• ISO27001 - Level: Advanced - Most recent: Any time
• NIS2 - Level: Advanced - Most recent: Any time
• Risk Management - Level: Advanced - Most recent: Any time
• Security Tooling - Level: Intermediate - Most recent: Any time

Language requirements

Dutch Level Native or bilingual proficiency

English Level Professional working proficiency