InfoSec Analyst – Second Line for NIS2 & Audits

Keystone Solutions; Belgique; Remote; EUR 52,000 - 64,000; Part time

Job summary

Keystone Solutions is seeking a skilled Information Security Analyst (Second Line) for a consultancy mission at a client site in Belgium. In this role, you will support the implementation of NIS2 and prepare for audits within the organization, focusing on evidence validation and documentation.

You will work under the CISO, assess first-line artifacts, build a proof register, and provide concrete improvement points to domain owners.

Qualifications

• 3 to 6 years of experience in information security, compliance, or IT audit.
• Familiarity with control frameworks such as CyFun, ISO 27001, and/or CIST CSF.
• Ability to interpret and assess technical evidence such as configuration exports, log files, tickets, recovery, and scan reports.
• Second-line role; not responsible for operational tasks like pentesting, SOC activities, or engineering.

Responsibilities

• Independently assess the quality of documentation and implementation evidence provided by the first line using CyFun guidance.
• Validate that the evidence supports the scores and is not based on assumptions to withstand external auditor scrutiny.
• Provide feedback to domain owners and formulate concrete improvement points for their action.
• Build documentation, including a proof register, that can be presented to the auditor without rework.
• Support preparations for achieving the essential level after April 2027.

Skills

Audit

ISO 27K

NIST

Job description

Keystone Solutions is seeking a skilled Information Security Analyst (Second Line) for a consultancy mission at a client site in Belgium. In this role, you will support the implementation of NIS2 and prepare for audits within the organization, focusing on evidence validation and documentation.

You will work under the CISO, assess first-line artifacts, build a proof register, and provide concrete improvement points to domain owners.