Information Security Consultant – ISO 27001 & IEC 6244

BIMONA; Brussel; On-site; EUR 83,000 - 165,000; Full time

Job summary

Bimona seeks an ISMS Security Consultant for a long-term Brussels project starting January 2027. You will manage and assess the Information Security Management System across both office and industrial environments, ensuring alignment with ISO 27001/2, NIST, CIS and IEC 62443.

You bring five-plus years of ICT security and functional analysis, plus strong analytical and communication skills to translate security needs into practical measures.

Qualifications

• Five years or more of experience in ICT security and functional analysis.
• Solid knowledge of NIST, CIS, ISO 27001/2 and IEC 62443.
• Strong analytical abilities to define problems, clarify requirements and craft fitting solutions.
• Understanding of application and infrastructure architecture, and ability to dig into technical environments for troubleshooting and impact analysis.
• Excellent listening and communication skills; able to explain technical topics in plain language.

Responsibilities

• Talk to ICT and business teams to identify needs and translate them into practical security measures.
• Write security governance procedures so the ICT team knows roles and responsibilities.
• Document business and security requirements based on NIST, CIS, ISO 27001/2 and IEC 62443 and keep them up to date.
• Review existing infrastructure and business systems with application, operations and business teams.
• Spot improvement opportunities and propose actionable solutions the organisation can implement.

Skills

ICT security

Functional analysis

Analytical skills

Communication

Troubleshooting

Job description

We’re looking for an ISMS Security Consultant for a long-term project in Brussels, starting January 2027. You’ll manage and assess the Information Security Management System of an organisation with both office and industrial environments. You need at least five years of experience in ICT security and functional analysis, and good knowledge of ISO 27001/2, NIST, CIS and IEC 62443.

What you’ll do

• Talk to ICT and business teams to find out what they need, then turn that into security measures that work in daily practice.
• Write security governance procedures, so the ICT team knows who does what.
• Document business and security requirements based on NIST, CIS, ISO 27001/2 and IEC 62443, and keep them up to date.
• Review existing infrastructure and business systems together with the application, operations and business teams.
• Spot where things can be improved and propose solutions the organisation can actually implement.

What you bring

• At least five years of experience in ICT security and functional analysis.
• Good knowledge of NIST, CIS, ISO 27001/2 and IEC 62443.
• Analytical skills: you define the problem, clarify the requirements and propose a fitting solution.
• Understanding of application and infrastructure architecture, and the ability to dig into a technical environment for troubleshooting, diagnosis and impact analysis.
• Strong listening and communication skills. You ask targeted questions and explain technical topics in plain language.
• Dutch or French (spoken) and English (written).

Nice to have: experience as an ISO 27001 auditor.

Practical

• Location: Brussels
• Contract: freelance or as a Bimona consultant