Information Security Analyst Second Line

Keystone Solutions; Aartselaar; Remote; EUR 42,000 - 66,000; Part time

Job summary

Keystone Solutions seeks an Information Security Analyst (Second Line) for a consultancy mission at a client site to support NIS2 implementation and audits. The role focuses on validating evidence, producing audit-ready documentation, and guiding domain owners on improvements.

You will be reporting to the CISO and work in a non-operational capacity, with exposure to diverse client environments and professional development opportunities within a dynamic consultancy setting.

Qualifications

• 3-6 years of experience in information security, compliance, or IT audit.
• Familiarity with control frameworks such as CyFun, ISO 27001, and/or NIST CSF.
• Ability to interpret and assess technical evidence (configuration exports, log files, tickets, recovery, scan reports).
• Second line role, not performing operational tasks like pentesting, SOC activities, or engineering.

Responsibilities

• Independently assess the quality of documentation and implementation evidence provided by the first line using CyFun guidance.
• Validate that the evidence supports the scores and is not based on assumptions for auditor scrutiny.
• Provide feedback to domain owners and formulate concrete improvement points for their action.
• Build documentation, including a proof register, that can be presented to the auditor without rework.
• Support preparations for achieving the essential level after April 2027.

Skills

audit

ISO 27K

NIST

Job description

Mission Overview

Keystone Solutions is seeking a skilled Information Security Analyst (Second Line) for a consultancy mission at a client site. In this role, you will support the implementation of NIS2 and prepare for audits within the organization.

Key Responsibilities

• Independently assess the quality of documentation and implementation evidence provided by the first line using CyFun guidance.
• Validate that the evidence supports the scores and is not based on assumptions to ensure it withstands external auditor scrutiny.
• Provide feedback to domain owners and formulate concrete improvement points for their action.
• Build documentation, including a proof register, that can be presented to the auditor without rework.
• Work towards achieving the important level and continue supporting preparations for the essential level after April 2027.

Requirements

• 3 to 6 years of experience in information security, compliance, or IT audit.
• Familiarity with control frameworks such as CyFun, ISO 27001, and/or CIST CSF.
• Ability to interpret and assess technical evidence such as configuration exports, log files, tickets, recovery, and scan reports.
• This role is situated in the second line and does not include operational tasks such as pentesting, SOC activities, or engineering.

This position reports to the CISO and requires a critical, analytical, and independent mindset. The CISO will support you with methodology and escalation when in doubt. The first line is responsible for self-assessment, providing evidence, and remediation.

At Keystone Solutions, we pride ourselves on our consultancy nature, offering dynamic projects that present diverse challenges across various client environments. As a consultant, you will experience turbo-charged learning and professional development opportunities, all while being part of a team that values ambition and core principles. Being a

Duration

As soon as possible - 31/12/2027 15 months (part time 3/5)

Skills required

• audit - Level: Intermediate - Most recent: Any time
• ISO 27K - Level: Intermediate - Most recent: Any time
• NIST - Level: Intermediate - Most recent: Any time

Language requirements

Dutch
Level Native or bilingual proficiency
English
Level Nice to have