IT Security Risk & Compliance Officer @ Lotus Bakeries

Amon; Kaprijke; Sur place; EUR 90 000 - 130 000; Plein temps

Résumé du poste

Lotus Bakeries in Belgium seeks an IT Security - Risk & Compliance Officer to own the global information security program. Based at the Belgian headquarters, you will align IT and OT security efforts with production plants worldwide, guiding policies, risk assessments, and vendor oversight.

You will lead ISO27001–based ISMS improvements, drive regulatory monitoring including NIS2, conduct audits, and foster a risk-aware culture through awareness training and incident coordination.

Qualifications

• Master’s degree in a relevant field.
• At least 5 years of information security, risk, or compliance experience in a multinational environment.
• Strong knowledge of ISO27001 and practical implementation experience.
• Solid IT and OT understanding, with production environment exposure (SCADA/PLC).
• Excellent stakeholder management and change management across all levels.

Responsabilités

• Mature and strengthen the ISMS based on ISO27001; write, update, and embed security policies globally.
• Conduct annual and project-based risk analyses with maintenance and plant managers to identify and mitigate risks.
• Track and implement evolving international regulations, including leading the NIS2 compliance project.
• Plan and execute internal security audits; guide external auditors and evaluate third‑party vendors.
• Design, drive, and deliver annual security awareness programs to foster a risk-aware culture worldwide.
• Coordinate incident response procedures and assess GDPR/data retention for new projects.

Connaissances

ISO27001

Information Security

Risk Management

Stakeholder Management

IT & OT

Vendor Audits

Formation

Master's degree in a relevant field

Outils

SCADA

PLC

Factory Automation

Description du poste

Besides Lotus Biscoff, the company also offers a diverse portfolio of brands including Peijnenburg, Annas, nākd, TREK, and BEAR. Lotus Bakeries is a proud and passionate company that builds strong global and local brands and creates small moments of happiness. Its mission is to bring people together with delicious products and to spark joy.

The company passed a major revenue milestone of more than 1.3 billion euro, combined with a strong and growing net result. Driven by this impressive growth rate, Lotus Bakeries is confidently looking forward. The company is a successful BEL20 listed player, yet still a proud family business at its core.

Lotus Bakeries employs over 4100 people worldwide. The company has 20 Sales offices in 17 countries and 13 production facilities in 6 countries. The global headquarters are located in Lembeke (Belgium) & Baar (Switserland). The IT department is based exclusively in Lembeke (Belgium).

Role

As a hands‑on operational expert, the IT Security - Risk & Compliance Officer takes full ownership of the international information security compliance landscape. Operating from the Belgian headquarters, this role coordinates and aligns global efforts to safeguard both Information Technology (IT) and Operational Technology (OT) environments, while continuously challenging the technical security teams and third‑party vendors.

Key responsibilities include:

• ISMS & Policy Management: Maturing and strengthening the existing Information Security Management System (ISMS) based on the ISO27001 standard. This includes writing, updating, and embedding security policies across the global organization.
• Risk Assessments: Conducting annual and project‑based risk analyses. This involves collaborating closely with stakeholders (such as sitting down with maintenance and plant managers) to identify, mitigate, and follow up on digital and data risks.
• Compliance & Regulatory Monitoring: Tracking and implementing evolving international regulations, specifically spearheading the NIS2 compliance project and mapping its requirements against existing frameworks.
• Audits & Vendor Evaluations: Planning and executing internal security audits, guiding external auditors, and systematically screening and evaluating third‑party suppliers (Third‑Party Risk Management).
• Culture & Awareness: Designing, driving, and delivering annual security awareness programs and training sessions (e.g., around phishing and cybersecurity) to foster a strong risk‑aware culture worldwide.
• Incident & Project Support: Helping to coordinate incident response procedures when necessary, and conducting security/privacy assessments on new business projects (e.g., evaluating data retention and GDPR compliance for a new factory camera system).

Profile

• Education: a Master’s degree in a relevant field of study.
• Experience: at least 5 years of proven experience in a similar information security, risk, or compliance role within a multinational environment.
• Frameworks & Standards: Possesses strong, in‑depth knowledge of the ISO27001 standard and practical experience with its implementation and maintenance.
• IT & OT Alignment: Demonstrates a solid understanding of both Information Technology (IT) and Operational Technology (OT). Experience or strong affinity with production environments—including systems like SCADA, PLCs, and factory automation is considered a major asset for visiting and auditing global production plants.
• Stakeholder & Change Management: Displays exceptional stakeholder management skills, with the ability to confidently communicate across all levels of the organization—from factory maintenance managers and engineering teams to third‑party vendors and C‑level executives. Strong change management skills are essential to introduce new security protocols smoothly and build a positive risk culture.

Offer

Lotus Bakeries is a BEL20 listed, international player with strong growth ambitions, but still a family business at its core, offering a wealth of challenging projects where you can make a real impact as an individual and be seen and heard.

You will be a part of an ambitious and driven team with a mix of talents, ranging from senior experts to junior high potentials.

Lotus Bakeries is well known for its company culture where passion, team spirit and open dialogue are the main drivers. The company helps people to grow and develop their talents, and strongly believes in internal mobility to allow talents to develop further.