External CISO: Strategy & Security by Design

Harvey Nash; Brussel Hoofdstad; On-site; EUR 166,000 - 277,000; Part time

Job summary

Harvey Nash is seeking a freelance Chief Information Security Officer (External CISO) to strengthen cybersecurity strategy, governance, and risk management within a regulated services environment. The role reports to Corporate Legal, Risk & Compliance, with collaboration across Executive Management, Business, IT, and Audit teams.

The assignment emphasizes strategy over day-to-day operations, with a first focus on Security by Design to embed security in projects, processes, and supplier

Qualifications

• At least 10 years of cybersecurity experience including governance or risk management.
• Demonstrable experience as a CISO, vciso, or senior cybersecurity advisor.
• Knowledge of ISO 27001, NIS2, GDPR, cyber risk management, and governance.
• Strong IAM, data protection, DevSecOps, detection/response, and third-party risk management knowledge.
• Experience reporting to executives, Audit Committees, or Boards.

Responsibilities

• Develop and operationalise the cybersecurity strategy and multi-year roadmap.
• Maintain the ISMS, governance framework, and target operating model.
• Translate risk profiles into priorities, milestones, and budgets; define responsibilities.
• Lead Security by Design initiatives and ensure security in projects, suppliers, and changes.
• Advise on digitalisation, cloud, data, and AI initiatives; balance security with business needs.
• Maintain cyber risk register, risk owners, treatment plans, and residual risks.
• Coordinate ISO 27001, NIS2, GDPR compliance and audits; monitor findings and actions.
• Produce periodic reports to executive management, Audit Committee, and Board.
• Monitor incidents, resilience, third-party risk, and foster security awareness.

Job description

Harvey Nash is seeking a freelance Chief Information Security Officer (External CISO) to strengthen cybersecurity strategy, governance, and risk management within a regulated services environment. The role reports to Corporate Legal, Risk & Compliance, with collaboration across Executive Management, Business, IT, and Audit teams.

The assignment emphasizes strategy over day-to-day operations, with a first focus on Security by Design to embed security in projects, processes, and supplier