SECURITY CONSULTANT (SENIOR)

OneSource Consulting; Brussel Hoofdstad; On-site; EUR 55,000 - 75,000; Full time

Job summary

OneSource Consulting zoekt een ervaren Security Consultant om guidelines en processen rondom informatiebeveiliging te ontwikkelen en te documenteren. U ondersteunt security architects bij regelgeving en risicoanalyses en rapporteert over compliance-gerelateerde aspecten.

De rol vereist diepe kennis van informatiebeveiligingskaders (ISO27002, NIST, OWASP) en certificeringen zoals CISM/CISSP/CEH. Nederlandse taal op CEFR C2-niveau is vereist.

Qualifications

• Verstrekkende ervaring als Security Consultant in data, infrastructuur of applicaties.
• Het opstellen van beleidsdocumenten en processen.
• Risicoanalyses uitvoeren volgens ISO27005.
• Beveiligingsprocessen en governance analyseren en documenteren.
• Kennis van beveiligingskaders en -standaarden zoals ISO27002, Secure Controls Framework en NIS2.
• Certificeringen zoals CISM, CISSP of CEH zijn gewenst of vereist.
• Kennis van FAIR, MITRE ATT&CK.
• Vloeiende beheersing van Nederlands (CEFR C2).

Responsibilities

• Guidelines opstellen binnen informatiebeveiliging.
• Processen ontwikkelen rondom informatiebeveiliging.
• Compliance-onderwerpen opvolgen en rapporteren.
• Ondersteunen van security architects bij regelgeving en risicoanalyses.
• Demonstreer ervaring als Security Consultant in data, infrastructuur of applicaties.

Skills

Security consultant

Policy documenten

Risicoanalyses ISO27005

Beveiligings governance

Beveiligingskaders

NIS2 kennis

CISM/CISSP/CEH

FAIR methode

MITRE ATT&CK

Nederlands B2/C2

Job description

LANGUAGES: DUTCH

CONTRACT DURATION: 01/12/2026 - 31/05/2027+POSSIBLE OF EXTENSION

JOB DESCRIPTION - ROLES AND RESPONSIBILITIES

Tasks of the role

• Drawing up guidelines in the context of information security
• Developing processes around information security
• Follow-up and reporting of compliance-related aspects of information security
• Providing support to the security architects in the context of legal provisions and risk analyses
• Demonstrable experience as a Security Consultant within one of the following environments: data, infrastructure, applications, ...
• Demonstrable expertise in specific knowledge domain of information security (e.g. implementing information security management processes, performing vulnerability analyses and pen tests, optimizing application security through cost-effective means, implementing Private Access Management, implementing encryption solutions)
• Demonstrable experience in analyzing, optimizing and documenting security processes and governance
• Demonstrable experience of security management techniques and/or frameworks (e.g.: ISO27000 series, COBIT for Security, NIST, OWASP, CIS Critical Security Controls for Effective Cyber Defense)
• Demonstrable knowledge and experience through certificates depending on domain of expertise (e.g. CISM, CISSP, CEH).
• Language requirement: Dutch at European CEFR - level C2.

SKILLS

• Demonstrable experience as a Security Consultant within one of the following environments: data, infrastructure, applications,
• Proven experience in drafting policy documents and processes
• Demonstrable experience in performing risk analyses (according to the ISO27005 standard)
• Proven experience in analyzing, optimizing and documenting security processes and governance
• Demonstrable expertise in a specific knowledge domain of information security
• Demonstrable knowledge of information security framework frameworks such as Secure Controls Framework and ISO27002
• Demonstrable knowledge of NIS2
• Demonstrable knowledge and experience via certificates depending on domain of expertise (e.g. CISM, CISSP, CEH).
• Demonstrable knowledge of the Factor Analysis for Information Risk methode (FAIR)
• Demonstrable knowledge of the Mitre ATT&CK framework