General Cybersecurity Assessment Expert

HumanInTech; Brussel Hoofdstad; Hybride; EUR 90 000 - 120 000; Plein temps

Résumé du poste

HumanInTech is seeking an experienced information security consultant to independently evaluate the cybersecurity posture and ISMS maturity of a Belgian public-sector organisation, using ISO 27001 as the reference framework. You will deliver a baseline assessment and an improvement plan to support prioritisation and decision-making.

Your role includes stakeholder interviews, gap analysis against Annex A controls, and presenting findings to the CISO with an actionable roadmap and executive

Qualifications

• Expert knowledge of ISO 27001/27002 and ISMS
• Experience with risk management methodologies (ISO 27005)
• Ability to conduct ISO 27001 gap analyses and maturity evaluations
• Capability to facilitate workshops with IT, security and business stakeholders
• Strong reporting skills to management and CISO-level audiences

Responsabilités

• Conduct independent evaluation of cybersecurity posture and ISMS maturity
• Organise and facilitate interviews and workshops with stakeholders
• Assess policies, procedures and technical controls
• Identify gaps against ISO 27001 Annex A and prioritise by risk
• Document findings and develop an improvement plan and roadmap
• Present results to the CISO and leadership and ensure knowledge transfer

Connaissances

ISO 27001

Risk assessment

ISMS maturity

Stakeholder interviewing

Reporting to CISO

Formation

Master's degree

Description du poste

What you will do

You will carry out an independent evaluation of the cybersecurity posture and ISMS maturity of a Belgian public-sector organisation, using ISO 27001 as the reference framework. Your assessment will provide the CISO with an objective baseline and a well-founded improvement plan to support prioritisation and decision-making.

Your main tasks:

• Evaluate the current cybersecurity posture and ISMS maturity against ISO 27001
• Organise interviews and workshops with stakeholders across IT, security teams and business units
• Assess existing policies, procedures and technical controls
• Identify gaps against ISO 27001 Annex A controls and prioritise them according to risk
• Document findings and develop a well-founded improvement plan
• Present results and recommendations to the CISO and stakeholders
• Ensure knowledge transfer to the CISO's team at the end of the assignment

You will deliver:

• A cybersecurity posture assessment report based on ISO 27001 (Annex A controls)
• Gap analysis against ISO 27001 requirements, by domain and control
• Risk and priority matrix
• Actionable improvement plan and roadmap with concrete recommendations
• Executive summary for the CISO and management

What we are looking for

You have expert-level knowledge and experience in:

• ISO 27001/27002 (ISMS, Annex A controls) and information security GRC
• Risk management and risk assessment methodologies (e.g. ISO 27005)
• Conducting cybersecurity and ISMS assessments based on ISO 27001, including gap analysis and maturity evaluation
• Developing well-founded and practical improvement plans and roadmaps
• Interviewing and facilitating workshops with varied stakeholders (IT, security, business)
• Reporting clearly and concisely to management and CISO level, including under time constraints

You also have a broad understanding of NIS 2 and GDPR, and are familiar with assessment and audit methodologies and sector benchmarking.

You hold a master's degree or equivalent through confirmed relevant experience. Certifications such as ISO 27001 Lead Auditor/Lead Implementer, CISSP, CISA or CISM are an asset.

You speak Dutch or French, and English. Bilingualism (Dutch and French) is an asset.

The setting

This assignment runs from mid-October 2026 to the end of December 2026, approximately two months full-time. You will work in Brussels in a hybrid arrangement, combining office presence and remote work according to service agreements.

You will report to the CISO and collaborate closely with the CISO's office, IT services, security teams and business stakeholders.

You can join us for this assignment as a freelancer or as an employee of HumanInTech. Same role, same team. If you join as an employee, your employment continues beyond this assignment. When it ends, we’ll work together to find your next assignment.

Location: Brussels, hybrid

Employer / contracting party: HumanInTech

Applications close (Brussels time): September 29, 2026 at 2:00 AM

Engagement: Freelance or employed by HumanInTech

Working hours: Full-time

Experience: 6–10 years or more

Education: Master's or more

Published: September 2026