NIS2 Cyber Risk & Compliance Analyst

Hive-X; Namen; On-site; Full time

Job description

As a Risk Assessment Analyst, you will be involved in the company’s transformation program aimed at compliance with the NIS2 directive, supporting governance functions, risk management and operational teams.

You contribute to thecarrying out of cybersecurity risk analyseson the company’s entities, systems and major components, by applying the methodologies, frameworks and standards defined by cybersecurity governance.Your role is to: collect, structure and analyze the information necessary for risk assessment, in order to provide a reliable and actionable basis for treatment and prioritization decisions.

You work under the coordination of theCybersecurity Risk Managerand in close interaction with the technical, business and project teams, ensuring theconsistency, traceability and quality of the analyzes produced.Your contribution is essential to the increase in maturity of the risk management system and the demonstration of NIS2 compliance.

YOUR MISSIONS

participate in carrying out risk assessments on the company’s critical entities, processes, systems and assets;

collect and consolidate the information necessary for analyzes (scopes, assets, flows, threats, existing controls) in conjunction with the teams concerned;

apply defined risk analysis methodologies (impact qualification, likelihood estimation, residual risk assessment);

contribute toupdating and maintaining the cybersecurity risk register;

document the findings, hypotheses and results of the analyzes in a structured manner;

identifygaps from NIS2 requirements and internal security benchmarks;

contribute to the production of the necessary evidence in the context of audits, compliance reviews and NIS2 controls;

work in collaboration with technical and project teams to ensure a good understanding of the operational context of the risks analyzed.

YOUR PROFILE

you hold a bachelor’s or master’s degree in IT, cybersecurity, risk management or a related field;

you have initial experience or a strong interest in risk management, compliance or cybersecurity;

you have a basic understanding of IT environments (systems, networks, applications, services) and their security issues;

you are comfortable with analyzing, structuring and documenting complex information;

you are methodical, rigorous and attentive to the consistency and quality of deliverables;

you know how to work within a defined framework, while demonstrating curiosity and an analytical mind;

youcommunicate clearly and constructively with technical and non-technical stakeholders.

Notes

The candidate must have the minimum skills and experience required.

The candidate must have a perfect command of the French language, both oral and written.

The mission will be carried out mainly on site in Namur on a full-time basis.

The candidate must be flexible and will potentially have to travel toour different business units spread across Wallonia to meet certain professions.

Consultancy days are 8 hours during the typical working day 7 a.m. – 6 p.m.

Required Skills