Information Security Officer (ISO)

BrightAnalytics; Gits; Sur place; EUR 90 000 - 130 000; Plein temps

Avantages offerts par ce poste

Company car

Meal vouchers €10/day

Eco-vouchers

Hospitalization insurance

Alan Health Benefits

Friday drinks and team events

Annual weekend trip

Résumé du poste

BrightAnalytics is seeking a senior information security leader to own the ISMS, ensuring ISO 27001 compliance and robust governance across our platform. You will lead risk management, incident response, and audits in a fast-paced fintech environment.

You will collaborate with cross-functional teams, manage security programs, and stay current with EU regulations (NIS2, DORA, EU AI Act). This role requires proximity to our Belgium hub and strong stakeholder acumen.

Qualifications

• Bachelor's or Master's in IT or Computer Science with ISMS and security framework experience.
• Experience with ISO 27001 certification processes and audits.
• Strong stakeholder management and ability to work in a fast-paced fintech environment.

Responsabilités

• Lead ISMS implementation, evaluation, and continuous improvement including ISO 27001 certification.
• Collaborate with security champions, oversee vulnerability management and pen-testing initiatives.
• Coordinate incident response and provide clear remediation guidance to technical teams.
• Serve as security authority during client discussions and audits with rigorous evidence.
• Maintain legal frameworks and compliance knowledge across EU regulations (NIS2, DORA, EU AI Act).

Connaissances

ISMS

ISO 27001

CISO certificate

Security governance

Vulnerability management

Incident response

audits & compliance

Data protection

DPO knowledge

Formation

Bachelor's or Master's in IT/CS

Outils

Vanta

Description du poste

At BrightAnalytics, you take the lead on our Information Security Management System (ISMS), acting as the ultimate authority on our security governance. We are a team of high-end professionals in a high-paced environment. We focus on results, we learn from the best, and we grow with impact.

Key Performance Areas

ISMS Implementation

• Take end-to-end responsibility to plan, evaluate, and continuously improve our information security services and ISO 27001 certification.

• Guarantee strict compliance with European data protection legislation across our entire platform.

• Organize steering committees with leadership to align security strategy with our high-paced organizational growth.

• Operate with a strict risk management mindset.

Application Security & Technical Collaboration

• Cooperate with our Security Champions.

• Oversee vulnerability management.

• Drive application and infrastructure pentesting initiatives to proactively expose and neutralize threats.

• Set up and participate actively in exercises to prepare the organization for real-world cyber attacks.

Incident Response

• Collaborate directly with technical teams to resolve vulnerabilities and update security processes swiftly.

• Report on security incidents with absolute clarity, delivering straight-to-the-point recommendations for remediation.

• Investigate and initiate small-scale improvements to internal tooling without waiting for a directive.

Client Trust & Audit Execution

• Work seamlessly with Vanta to maintain a comprehensive corpus of evidences on Security and Privacy.

• Act as the security authority during client contact, directly responding to compliance and security questionnaires.

• Prepare rigorously for our internal and external security audits.

Legal & Compliance

• Take full ownership of our legal frameworks, staying relentlessly up to date with evolving security laws and international regulations.

• Execute strict license management, driving the follow-up and final approval processes.

• Assume full responsibility and act as our dedicated Data Protection Officer (DPO).

• Apply your knowledge of NIS2, DORA, CRA, and the EU AI Act to future-proof our operational resilience.

What do you bring?

• A Bachelor’s or Master’s degree in IT or Computer Science, backed by proven experience in ISMS and security frameworks.

• In possession of a CISO certificate is an added value

• Deep knowledge of AI to critically evaluate both its security risks and operational advantages within our environment.

• "Not my job" is not in our vocabulary, autonomous execution and extra-role behavior are the baseline.

• You function highly focussed under pressure and can handle critical situations

• Thriving in our hub at least 4 days a week, because proximity is power and accelerates growth.

What can you expect?

• A key role in one of the fastest-growing fintech companies in Belgium

• We are a financially healthy and ISO-certified scale-up with strong international growth ambitions

• An open and entrepreneurial culture where personal initiative is valued

• Being part of a team that highly prizes entrepreneurship

• On-the-job coaching and weekly training to develop unique skills

• No less than 20 statutory + 12 extra vacation days

• Flexible working hours: start between 7:30 and 9:30 AM and finish between 4:30 and 6:30 PM.

• Company car

• Meal vouchers of €10 per working day

• Eco-vouchers

• Hospitalization insurance

• Alan Health Benefits (your comprehensive supplementary health insurance)

• Friday after-work drinks, legendary team-building events, and an annual weekend trip with the entire BrightAnalytics team