Information Security Analyst – NIS2 & Compliance

Pauwels Consulting; Aartselaar; Hybrid; EUR 36,000 - 71,000; Part time

Job summary

Pauwels Consulting seeks a security specialist to support NIS2 readiness through second‑line validation of evidence and audit documentation. You will build audit dossiers, interpret logs and scans, and provide concrete improvement points to domain owners.

Dutch native with 3+ years in information security is preferred. The role focuses on validating that internal evidence supports scores, avoiding assumptions, and helping the organization achieve security maturity in a hybrid, part-time setting

Qualifications

• 3+ years of experience in information security, compliance, or IT audit.
• Deep knowledge of security frameworks such as CyFun, ISO 27001, or NIST CSF.
• Experience in a second-line security role focusing on validation and oversight.
• You're able to analyze technical data like logs, vulnerability scans, and system configurations.
• Native in Dutch.

Responsibilities

• Assess the quality of documentation and implementation evidence provided by internal domains based on security guidance.
• Validate that provided evidence supports self-evaluation scores and is not based on assumptions.
• Provide structured feedback and concrete improvement points to domain owners.
• Build comprehensive audit dossiers and evidence registers for external verification.
• Interpret technical evidence including configuration exports, log files, tickets, and scan reports.
• Support the organization in achieving and maintaining required security maturity levels.

Skills

Second-line validation

Security audits

NIS2 framework

ISO 27001

NIST CSF

Logs analysis

Vulnerability scans

Dutch native

Tools

CyFun

Job description

Our client, a prominent organization in the environmental utility and infrastructure sector, is seeking a specialist to support the implementation of the NIS2 framework. The role focuses on second-line validation of security evidence and documentation to ensure organizational readiness for external audits.

• Assess the quality of documentation and implementation evidence provided by internal domains based on security guidance.
• Validate that provided evidence supports self-evaluation scores and is not based on assumptions.
• Provide structured feedback and concrete improvement points to domain owners.
• Build comprehensive audit dossiers and evidence registers for external verification.
• Interpret technical evidence including configuration exports, log files, tickets, and scan reports.
• Support the organization in achieving and maintaining required security maturity levels.

• You have 3+ years of experience in information security, compliance, or IT audit.
• You possess deep knowledge of security frameworks such as CyFun, ISO 27001, or NIST CSF.
• You bring experience in a second-line security role focusing on validation and oversight.
• You're able to analyze technical data like logs, vulnerability scans, and system configurations.
• You are native in Dutch.

Nice to Haves

• Experience with CyFun implementations specifically for essential organizations.
• Knowledge of English.

• Start date: ASAP
• Duration: 15 months (until 31/12/2027)
• Work regime: Part-time (3/5)
• Location: Aartselaar
• Working model: Hybrid
• Contract: open to both permanent employees and freelancers