General Cybersecurity Assessment Expert

keystone-solutions; Brussel; Sur place; EUR 70 000 - 100 000; Plein temps

Résumé du poste

Keystone Solutions seeks a General Cybersecurity Assessment Expert for a three-month consultancy at a client site in Belgium. The role focuses on evaluating the police organization’s cybersecurity posture against ISO 27001, reporting to the CISO, and delivering a detailed improvement plan with a roadmap.

As a consultant, you will organize workshops, conduct interviews with IT and security teams, and ensure knowledge transfer to the client’s CISO team at project end.

Qualifications

• Master's degree or equivalent confirmed experience.
• Certifications are assets: ISO 27001 Lead Auditor/Lead Implementer, CISSP, CISA, CISM.
• Fluency in Dutch or French and English required.
• Experience with ISO 27001/27002 ISMS, Annex A controls, and risk management.

Responsabilités

• Provide independent assessment of ISMS posture based on ISO 27001.
• Organize interviews and workshops with stakeholders.
• Evaluate policies, procedures and technical controls.
• Identify gaps against ISO 27001 Annex A controls and prioritize by risk.
• Document findings and develop a comprehensive improvement plan.
• Present results to CISO and stakeholders.
• Ensure knowledge transfer to the CISO team at end of mission.

Connaissances

Risk management

Workshop facilitation

ISMS assessments

Executive reporting

ISO 27001/27002 knowledge

Formation

Master's degree or equivalent

ISO 27001 Lead Auditor/Lead Implementer

CISSP

CISA

CISM

Description du poste

Mission Overview:

Keystone Solutions is seeking a General Cybersecurity Assessment Expert for a consultancy mission at a client site. This role involves evaluating the cybersecurity posture of a federal police organization based on the ISO 27001 framework. As a consultant, you will be representing Keystone Solutions while working closely with the Chief Information Security Officer (CISO) and their team.

Key Responsibilities:

• Provide an independent assessment of the cybersecurity posture and maturity of the Information Security Management System (ISMS) based on ISO 27001.
• Organize interviews and workshops with stakeholders (IT, security teams, business units).
• Evaluate existing policies, procedures, and technical controls.
• Identify gaps against ISO 27001 Annex A controls and prioritize them according to risk.
• Document findings and develop a comprehensive improvement plan.
• Present results and recommendations to the CISO and stakeholders.
• Ensure knowledge transfer to the CISO team at the end of the mission.

Deliverables:

• Cybersecurity posture assessment report based on ISO 27001 (Annex A controls).
• Gap analysis against ISO 27001 requirements by domain/control.
• Risk and priority matrix.
• Detailed improvement/action plan (roadmap) with concrete recommendations.
• Executive summary for the CISO and management.

Knowledge Areas:

• ISO 27001/27002 (ISMS, Annex A controls); information security and governance, risk management.
• Risk management and assessment methodologies (e.g., ISO 27005).
• Familiarity with NIS 2 and GDPR.
• Assessment and audit methodologies; benchmarking against industry standards.

Communication and Collaboration:

• Clear and concise reporting to the CISO and management.
• Collaborate with the CISO, ICT services, security teams, and business stakeholders.
• Fluency in Dutch or French is required; bilingualism is an asset; English is required.

Qualifications:

• Master's degree or equivalent through relevant confirmed experience.
• Certifications are an asset (e.g., ISO 27001 Lead Auditor/Lead Implementer, CISSP, CISA, CISM).

Why Join Keystone Solutions:

As a consultant at Keystone Solutions, you will engage in dynamic projects that offer diverse challenges across various client environments. Our commitment to turbo-charged learning ensures that you will have ample opportunities for professional development and broad learning experiences. We value ambition and are dedicated to supporting your career growth within our framework. Being a 'K-Stone' means bringing our core values to every engagement.

Duration:

15/10/2026 - 31/12/2026 3 months (full time)

Skills required:

• Analyse et gestion des risques dans le cadre d’un ISMS (p. ex. ISO 27005) - Level: Expert - Most recent: Any time
• Élaborer des plans d’amélioration et roadmaps étayés et réalisables en pratique - Level: Expert - Most recent: Any time
• Interviewer et faciliter des ateliers avec des parties prenantes variées (IT, sécurité, métier) - Level: Expert - Most recent: Any time
• Réaliser des assessments cybersécurité/ISMS sur la base d’ISO 27001 ; gap-analyse et évaluation de m - Level: Expert - Most recent: Any time
• Rendre compte de manière claire et concise au niveau management/CISO, y compris sous contrainte de t - Level: Expert - Most recent: Any time

Language requirements:

Dutch or French
Level Active knowledge
English
Level Active knowledge