Freelance CISO

ClearSource; Brussel Hoofdstad; On-site; EUR 148,000 - 221,000; Part time

Job summary

ClearSource is seeking an experienced freelance CISO to strengthen client cybersecurity strategy, governance and resilience. Embedded within Corporate Legal, Risk & Compliance, you will operate in the Second Line of Defense, providing independent advice with hands-on support while avoiding day-to-day security operations.

You will shape the strategy, develop the ISMS and governance, and integrate cyber risks into Enterprise Risk Management.

Qualifications

• 10+ years of experience as a CISO or senior cybersecurity adviser.
• Strong knowledge of ISO 27001, NIS2, GDPR and governance practices.
• Technical depth to assess penetration tests and security assessments.
• Experience leading transformation programmes and reporting to executives.
• The ability to influence and translate technical risks into business decisions.

Responsibilities

• Shape and steer the cybersecurity strategy and multi-year roadmap.
• Develop the ISMS, governance framework and actionable security policies.
• Integrate cyber risks into Enterprise Risk Management.
• Drive Security by Design with a focus in the first 6–12 months.
• Support compliance, assurance and third-party risk management.
• Report on risks, maturity and programme effectiveness to leadership.

Skills

CISO experience

ISO 27001

NIS2

GDPR

Governance

Penetration tests

Executive reporting

Security strategy

Stakeholder influence

Job description

ClearSource is looking for an experienced freelance CISO to strengthen our client’s cybersecurity strategy, governance and cyber resilience.

Embedded within Corporate Legal, Risk & Compliance, you will operate in the Second Line of Defense, combining independent advice and challenge with practical, hands‑on support for business and IT.

Your mission

• Shape and steer the cybersecurity strategy and multi-year roadmap.
• Develop the ISMS, governance framework and actionable security policies.
• Integrate cyber risks into Enterprise Risk Management.
• Drive Security by Design, with a strong focus on this strategic programme during the first 6–12 months.
• Support compliance, assurance and third‑party risk management.
• Report on risks, maturity and programme effectiveness, with direct access to executive management, the Audit Committee and the Board.

What this role is — and isn’t

This is not a purely advisory, audit or control-focused assignment. You will work closely with business and IT, contribute directly to analyses and deliverables, and build the support needed to turn strategy into action.

However, hands‑on does not mean running day‑to‑day technical security operations. Business and IT retain ownership of their risks, risk acceptance, controls and operational delivery. You provide the framework, guidance, oversight and independent challenge.

The assignment does not include a general DPO or legal advisory function.

What you bring

• 10+ years’ relevant experience, with a proven track record as a CISO, vCISO or senior cybersecurity adviser.
• Strong knowledge of ISO 27001, NIS2, GDPR, cyber risk and governance.
• Sufficient technical depth to assess and challenge penetration tests and security assessments.
• Experience leading transformation programmes and reporting to senior decision-makers.
• The ability to influence, build coalitions and translate technical risks into clear business decisions.