NIS2 Governance Lead — EASM & CyFun Expert

HumanInTech; Brussel Hoofdstad; Hybrid; EUR 80,000 - 120,000; Full time

Job summary

HumanInTech is seeking an experienced information security governance professional in Brussels for a hybrid, 3/5 role. The assignment runs 1 December 2026 to 30 June 2027, with on-site Brussels presence two days per week and flexible remote work. Start by 15 December 2026.

Freelance or employee path available, with potential extension. The role requires 6–10 years in information security governance or risk management, with French language proficiency and Belgian regulatory knowledge.

Qualifications

• At least five years in information security governance or risk management.
• Experience implementing NIS2 or Belgian laws in organisations.
• Led at least one maturity assessment or gap analysis against a security framework.
• Built and analysed security risk registers with business stakeholders.

Responsibilities

• Perform NIS2 maturity assessments and gap analyses across numerous artefacts.
• Design and maintain the security risk management framework (strategy, appetite, risk register, treatment plans).
• Drive EASM initiative: asset discovery, prioritisation and remediation tracking with IT provider.
• Draft and secure adoption of priority security policies by directorates.
• Support directorates integrating security controls with network, DPO, data protection and quality teams.
• Produce indicators and management committee decision documents.

Skills

BIA & business continuity

Facilitating workshops

NIS/NIS2 directives

Maturity assessment & gap analysis

ISMS (ISO/IEC 27001)

ISO 27005 risk analysis

Writing security policies

Security frameworks (CyFun/ISO27002/NI

Risk registers & treatment plans

Education

Bachelor's degree or higher

Job description

HumanInTech is seeking an experienced information security governance professional in Brussels for a hybrid, 3/5 role. The assignment runs 1 December 2026 to 30 June 2027, with on-site Brussels presence two days per week and flexible remote work. Start by 15 December 2026.

Freelance or employee path available, with potential extension. The role requires 6–10 years in information security governance or risk management, with French language proficiency and Belgian regulatory knowledge.