Information Security Analyst Second Line

Keystone Solutions; Belgique; Remote; EUR 52,000 - 64,000; Part time

Job summary

Keystone Solutions is seeking a skilled Information Security Analyst (Second Line) for a consultancy mission at a client site in Belgium. In this role, you will support the implementation of NIS2 and prepare for audits within the organization, focusing on evidence validation and documentation.

You will work under the CISO, assess first-line artifacts, build a proof register, and provide concrete improvement points to domain owners.

Qualifications

• 3 to 6 years of experience in information security, compliance, or IT audit.
• Familiarity with control frameworks such as CyFun, ISO 27001, and/or CIST CSF.
• Ability to interpret and assess technical evidence such as configuration exports, log files, tickets, recovery, and scan reports.
• Second-line role; not responsible for operational tasks like pentesting, SOC activities, or engineering.

Responsibilities

• Independently assess the quality of documentation and implementation evidence provided by the first line using CyFun guidance.
• Validate that the evidence supports the scores and is not based on assumptions to withstand external auditor scrutiny.
• Provide feedback to domain owners and formulate concrete improvement points for their action.
• Build documentation, including a proof register, that can be presented to the auditor without rework.
• Support preparations for achieving the essential level after April 2027.

Skills

Audit

ISO 27K

NIST

Job description

Mission Overview

Keystone Solutions is seeking a skilled Information Security Analyst (Second Line) for a consultancy mission at a client site. In this role, you will support the implementation of NIS2 and prepare for audits within the organization.

Key Responsibilities

• Independently assess the quality of documentation and implementation evidence provided by the first line using CyFun guidance.
• Validate that the evidence supports the scores and is not based on assumptions to ensure it withstands external auditor scrutiny.
• Provide feedback to domain owners and formulate concrete improvement points for their action.
• Build documentation, including a proof register, that can be presented to the auditor without rework.
• Work towards achieving the important level and continue supporting preparations for the essential level after April 2027.

Requirements

• 3 to 6 years of experience in information security, compliance, or IT audit.
• Familiarity with control frameworks such as CyFun, ISO 27001, and/or CIST CSF.
• Ability to interpret and assess technical evidence such as configuration exports, log files, tickets, recovery, and scan reports.
• This role is situated in the second line and does not include operational tasks such as pentesting, SOC activities, or engineering.

This position reports to the CISO and requires a critical, analytical, and independent mindset. The CISO will support you with methodology and escalation when in doubt. The first line is responsible for self-assessment, providing evidence, and remediation.

At Keystone Solutions, we pride ourselves on our consultancy nature, offering dynamic projects that present diverse challenges across various client environments. As a consultant, you will experience turbo-charged learning and professional development opportunities, all while being part of a team that values ambition and core principles. Being a

Duration

As soon as possible - 31/12/2027 15 months (part time 3/5)

Skills required

• audit - Level: Intermediate - Most recent: Any time
• ISO 27K - Level: Intermediate - Most recent: Any time
• NIST - Level: Intermediate - Most recent: Any time

Language requirements

Dutch
Level Native or bilingual proficiency
English
Level Nice to have