Security Consultant

Harvey Nash; Antwerpen; Sur place; EUR 65 000 - 95 000; Plein temps

Résumé du poste

Harvey Nash is seeking an Information Security Officer (NIS2) to lead information security for the Belgian entity. You will translate the group’s security strategy into Belgium-specific policies, ensure NIS2 governance, and coordinate audits and remediation efforts.

Key responsibilities include risk analyses, implementation of security measures, and ISMS support. Fluency in Dutch and strong English skills are required to communicate with the group and internal stakeholders.

Qualifications

• 3–5 years of information security and governance experience.
• Knowledge of ISO 27001/27002, NIST CSF, CIS Controls, CyberFundamentals, GDPR; NIS2 knowledge required.
• Experience with ISMS setup or audits and reporting to management.

Responsabilités

• Develop and maintain the Belgian entity's information security policy aligned with group standards.
• Coordinate NIS2 implementation including risk analyses, security measures and remediation follow-up.
• Establish or integrate an ISMS and support audits and controls.
• Serve as the contact for audits, internal controls, and NIS2 oversight in Belgium.
• Ensure central security standards are applicable locally and feedback local needs to Group Security.
• Develop and support NIS2 awareness initiatives for employees.

Connaissances

Information security

Governance

NIS2

ISO 27001

Communication

Description du poste

As Information Security Officer (NIS2)

You are the point of contact for information security within the Belgian organization. You translate the group's central security strategy into concrete measures and processes for Belgium and ensure NIS2-compliant governance, reporting, and follow-up.

Key Responsibilities

• Develop, align, and maintain the information security policy for the Belgian entity in line with the group's policy (ISO 2700x, NIST, CIS Controls, CyberFundamentals).
• Coordinate the NIS2 implementation: risk analyses, security measures, reporting to management and the group, and follow-up of remediation plans.
• Establish and support an ISMS (Information Security Management System) or integrate it into existing management systems.
• Act as the point of contact for audits, internal controls, and NIS2 oversight for the Belgian entity.
• Ensure that central security standards from the group are practically applicable within the Belgian context; provide feedback on local needs to the Group Security organization.
• Develop and support NIS2 awareness initiatives for employees.

Profile and Requirements

• 3–5 years of experience in information security and cybersecurity governance.
• Knowledge of relevant frameworks: ISO 27001/27002, NIST CSF, CIS Controls, CyberFundamentals, ISO 31000, GDPR; knowledge of NIS2 is required.
• Experience in setting up or supporting an ISMS and preparing for audits.
• Strong communication skills: able to explain complex security topics clearly to non-technical stakeholders and act as a bridge between different parties.
• Experience in a group/corporate structure is a plus, as is experience in the energy sector.
• Languages: fluent Dutch (required) and good English skills for communication with the group.