Information Security Analyst – NIS2 & Compliance

Pauwels Consulting; Antwerpen; Hybrid; EUR 42,000 - 62,000; Part time

Benefits offered by this job

Hybrid work model

Job summary

Pauwels Consulting is seeking a security specialist in Belgium to support the implementation of the NIS2 framework. The role focuses on second-line validation of evidence and documentation to ensure readiness for external audits.

The position is part-time (3/5) in a hybrid setup, based in Aartselaar. You will assess documentation, provide improvement feedback, and build audit dossiers to help the organization reach required security maturity levels. Native Dutch language is required.

Qualifications

• 3+ years of experience in information security, compliance, or IT audit.
• Deep knowledge of security frameworks such as CyFun, ISO 27001, or NIST CSF.
• Experience in a second-line security role focusing on validation and oversight.
• Ability to analyze logs, vulnerability scans, and system configurations.
• Native Dutch speaker.

Responsibilities

• Assess documentation quality from internal domains based on security guidance.
• Validate that provided evidence supports self-evaluation scores and is not based on assumptions.
• Provide structured feedback and concrete improvement points to domain owners.
• Build audit dossiers and evidence registers for external verification.
• Interpret technical evidence including configuration exports, log files, tickets, and scan reports.
• Support the organization in achieving and maintaining required security maturity levels.

Skills

Information security

Compliance

IT audit

Security frameworks

Security data analysis

Dutch language

Job description

Our client, a prominent organization in the environmental utility and infrastructure sector, is seeking a specialist to support the implementation of the NIS2 framework. The role focuses on second-line validation of security evidence and documentation to ensure organizational readiness for external audits.

Responsibilities

• Assess the quality of documentation and implementation evidence provided by internal domains based on security guidance.
• Validate that provided evidence supports self-evaluation scores and is not based on assumptions.
• Provide structured feedback and concrete improvement points to domain owners.
• Build comprehensive audit dossiers and evidence registers for external verification.
• Interpret technical evidence including configuration exports, log files, tickets, and scan reports.
• Support the organization in achieving and maintaining required security maturity levels.

Requirements

• You have 3+ years of experience in information security, compliance, or IT audit.
• You possess deep knowledge of security frameworks such as CyFun, ISO 27001, or NIST CSF.
• You bring experience in a second-line security role focusing on validation and oversight.
• You're able to analyze technical data like logs, vulnerability scans, and system configurations.
• You are native in Dutch.

Nice to Haves

• Experience with CyFun implementations specifically for essential organizations.
• Knowledge of English.

Offer

• Start date: ASAP
• Duration: 15 months (until 31/12/2027)
• Work regime: Part-time (3/5)
• Location: Aartselaar
• Working model: Hybrid
• Contract: open to both permanent employees and freelancers