Security Officer

Editx; Brussel; On-site; EUR 70,000 - 100,000; Full time

Job summary

Editx in Brussels seeks an IT Security Officer to strengthen cybersecurity, IT risk, resilience, and disaster recovery across the organization. You will be part of the CISO organization and work with IT and business stakeholders to enhance security posture and ensure critical services can withstand disruptions.

This broad role covers Information Security, IT Risk Management, Business Continuity, Disaster Recovery, and security governance.

Qualifications

• Experience implementing an Information Security Management System (ISMS) and related security controls.
• Ability to translate security requirements into pragmatic, actionable activities.
• Strong collaboration with IT and business stakeholders to enhance security posture.

Responsibilities

• Contribute to the implementation and continuous improvement of the ISMS.
• Define and maintain information security policies, standards, procedures and guidelines.
• Provide security guidance for IT and business projects and assess security risks.
• Support information and cyber security incident management and coordination of forensic activities.
• Coordinate security initiatives within the CISO organization and with internal/external stakeholders.
• Develop security awareness initiatives, training, and communications.
• Ensure security and resilience requirements are aligned with business continuity objectives.

Skills

Information Security

IT Risk Management

Disaster Recovery

Security Governance

Cybersecurity

Job description

Are you the IT Security Officer who can strengthen cybersecurity, IT risk, resilience, and disaster recovery across a leading organization in Brussels?

We are looking for an IT Security Officer with a strong focus on IT resilience, Service Continuity, Disaster Recovery, and IT Risk Management.

You will be part of the CISO organization and work closely with IT and business stakeholders to strengthen the organization’s security posture, manage information and IT risks, and ensure critical services can withstand and recover from disruptions.

This is a broad security role that combines Information Security, IT Risk Management, Business Continuity, Disaster Recovery, and security governance. You will have visibility across the organization and play an important role in translating security and resilience requirements into practical initiatives.

Rolenformation Security

• Contribute to the implementation and continuous improvement of the Information Security Management System (ISMS).
• Help define, maintain, and implement information security policies, standards, procedures, and guidelines.
• Provide security advice and guidance for IT and business projects.
• Assess security risks and ensure appropriate security controls are implemented.
• Support information and cyber security incident management, including coordination of forensic activities.
• Contribute to security awareness initiatives, training, and communications.
• Coordinate and follow up on security projects and initiatives within the CISO organization.
• Work closely with internal and external stakeholders to improve the organization's overall security posture.

IT Risk Management

• Identify, assess, monitor, and report IT and information security risks.
• Maintain the information and IT risk registers and provide management reporting.
• Perform risk assessments, including Business Impact Assessments and Threat & Vulnerability Assessments.
• Help embed risk management practices into business and IT processes.
• Provide tactical security and risk advice to stakeholders and project teams.

IT Security Resilience & Disaster Recovery

• Act as a key point of contact for IT resilience and security continuity.
• Assess the resilience and Disaster Recovery readiness of applications, infrastructure, and IT services.
• Review security and resilience documentation together with technical architects and subject matter experts.
• Ensure appropriate security and recovery requirements are incorporated into IT projects and operational processes.
• Work with external service providers to assess and obtain assurance around security, resilience, and service recovery.
• Develop and mature the Disaster Recovery testing cycle for applications and data.
• Analyze and report on recovery test results and identify opportunities for improvement.
• Ensure IT security and continuity requirements are aligned with wider Business Continuity objectives.