NIS2 TPRM Security Consultant (Energy/Infra)

Harvey Nash Group; Luik; On-site; EUR 70,000 - 100,000; Full time

Job summary

Harvey Nash Group is leading a steering and implementation mission for the TPRM program under NIS2. The role focuses on governance framing, policy formalization, and risk-based actions with cross-functional collaboration across Purchasing, Legal, Data Protection, Projects and IT/Security teams.

French language proficiency is required, and experience with GRC tools and security frameworks is essential. Success will come from formalizing supplier risk policies, integrating security requirements

Qualifications

• Knowledge of NIS2 and CyFun/NIST CSF.
• Experience in third-party risk management across supplier lifecycle.
• 2 years in energy or critical infrastructure sector.
• Coordinate with Purchasing, Legal, business lines and IT/Security teams.
• Document and optimize security processes and governance.
• GRC consulting/management experience.
• Security program or project management experience.
• Security consultant experience (3 years).
• Experience in information security risk analysis and monitoring of treatment plans.
• Maturity or compliance assessment on a control framework.
• Native or C2 level French.
• Facilitation of workshops, committees and steering-body reporting.
• Experience with security management techniques or frameworks (ISO-27000, COBIT, NIST, OWASP, CIS Controls).
• Experience defining or using GRC tools: inventory, questionnaires, risk register, action plans, reporting.

Skills

NIS2 knowledge

CyFun framework

NIST CSF

Third-party risk mgmt

Supplier lifecycle

Security governance

Security program mgmt

Security consulting

GRC consulting

Security risk analysis

Maturity assessment

Compliance assessment

Workshop facilitation

Committee reporting

EU/NIS2 compliance

ISO/27000 series

COBIT for Security

OWASP

CIS Controls

GRC tools (inventory, questionnaires,3

Tools

EBIOS

Job description

Harvey Nash Group is leading a steering and implementation mission for the TPRM program under NIS2. The role focuses on governance framing, policy formalization, and risk-based actions with cross-functional collaboration across Purchasing, Legal, Data Protection, Projects and IT/Security teams.

French language proficiency is required, and experience with GRC tools and security frameworks is essential. Success will come from formalizing supplier risk policies, integrating security requirements