Information Security Governance & Risk Architect

Neurho Solutions; Brussel; On-site; EUR 90,000 - 120,000; Full time

Benefits offered by this job

Extra-legal benefits

Job summary

Neurho seeks an Information Security Governance Expert to build and mature its information security function. You will work with the CISO to translate assessments into a practical risk approach and help management adopt security controls.

Your role includes assessing NIS2 maturity, designing risk frameworks, leading EASM activities, drafting policies, and aligning security with business teams. Fluency in French is required.

Qualifications

• Five+ years in business impact analysis within the last three years.
• Five+ years in business continuity within the last three years.
• Five+ years facilitating workshops with business management recently.
• Five+ years implementing NIS and NIS2 within the last 12 months.
• Five+ years in security maturity and gap assessments in the last three years.
• Five+ years with EASM including asset discovery and remediation in the last 12 months.
• Five+ years with ISO/IEC 27001/27002/27005 including recent use.
• Five+ years using NIST Cybersecurity Framework recently.
• Five+ years managing risk registers and risk treatment plans.
• Five+ years handling risk appetite details recently.
• Proficient in French at C2 level.

Responsibilities

• Assess NIS2 maturity and identify gaps across security artefacts.
• Design risk management approach including risk appetite and registers.
• Lead external attack surface management from discovery to remediation.
• Draft priority security policies and drive adoption by management.
• Assist business units in integrating controls with stakeholders.
• Prepare indicators and decision papers for leadership.

Skills

NIS2 implementation

NIS maturity assessment

Risk management

EASM (External Attack Surface

ISO/IEC 27001

ISO/IEC 27005

ISO/IEC 27002

NIST Cybersecurity Framework

Risk registers & treatment plans

CyberFundamentals (CyFun)

Policy drafting

Security governance

Security risk assessment

Workshops with management

French proficiency (C2)

Tools

CISM/CISA/CISSP or equivalent

ISO 27001 Lead Implementer/Auditor

Job description

Neurho seeks an Information Security Governance Expert to build and mature its information security function. You will work with the CISO to translate assessments into a practical risk approach and help management adopt security controls.

Your role includes assessing NIS2 maturity, designing risk frameworks, leading EASM activities, drafting policies, and aligning security with business teams. Fluency in French is required.