Senior Chief Information Security Officer – ISO 27001 & Risk Governance

Pauwels Consulting; Brussel; Sur place; EUR 120 000 - 180 000; Plein temps

Résumé du poste

Pauwels Consulting in Brussels seeks a Senior Chief Information Security Officer to drive cybersecurity strategy and risk management across the enterprise, embedding a Security by Design approach in the second line of defense.

The role leads the multi-year program to enhance resilience, aligns cyber risk with ERM, and reports to executive management and the Board. Fluent in Dutch, French, and English, you will shape a security-aware culture and collaborate with transformed digital initiatives.

Qualifications

• 8+ years of experience in cybersecurity, information security management, or cyber risk governance.
• Proven experience as a CISO or senior cybersecurity advisor managing large-scale transformation programs.
• Expert knowledge of ISO 27001, NIS2, and GDPR compliance frameworks.
• Technical proficiency in evaluating risk analyses, penetration tests, and security assessments.
• Broad knowledge of IAM, Data Protection, and DevSecOps methodologies.
• Experience reporting to executive boards and audit committees regarding security posture and risk.
• Strong stakeholder management and ability to translate technical risks into business impact.
• Proactive and hands-on, capable of driving cultural change and advisory deliverables.
• Fluent in Dutch, French, and English.

Responsabilités

• Develop and operationalize the cybersecurity strategy and multi-year program to enhance organizational resilience.
• Integrate cyber risks into the broader Enterprise Risk Management (ERM) framework and strategic decision-making processes.
• Lead the implementation of Security by Design across digital transformation, cloud, and AI initiatives.
• Maintain the Information Security Management System (ISMS) and governance framework in alignment with international standards.
• Report on risk profiles, maturity levels, and investment needs to executive management and the Board of Directors.
• Foster a security-aware culture by building coalitions and empowering a network of security champions.

Connaissances

Cybersecurity

Information Security Mgmt

Cyber Risk Governance

CISO Leadership

Risk Analysis

Penetration Testing

Security Assessments

IAM

Data Protection

DevSecOps

Executive Reporting

Stakeholder Management

Dutch/French/English

Description du poste

Our client, a prominent organization in the professional services sector, is looking for a Senior Chief Information Security Officer to drive their cybersecurity strategy and risk management. This role focuses on operationalizing governance frameworks and embedding a Security by Design approach across the enterprise within the second line of defense.

• Develop and operationalize the cybersecurity strategy and multi-year program to enhance organizational resilience.
• Integrate cyber risks into the broader Enterprise Risk Management (ERM) framework and strategic decision-making processes.
• Lead the implementation of Security by Design across digital transformation, cloud, and AI initiatives.
• Maintain the Information Security Management System (ISMS) and governance framework in alignment with international standards.
• Report on risk profiles, maturity levels, and investment needs to executive management and the Board of Directors.
• Foster a security-aware culture by building coalitions and empowering a network of security champions.

• You have 8+ years of experience in cybersecurity, information security management, or cyber risk governance.
• You bring proven experience as a CISO or senior cybersecurity advisor managing large-scale transformation programs.
• You possess expert knowledge of ISO 27001, NIS2, and GDPR compliance frameworks.
• You have technical proficiency in evaluating risk analyses, penetration tests, and security assessments.
• You bring broad knowledge of IAM, Data Protection, and DevSecOps methodologies.
• You possess experience reporting to executive boards and audit committees regarding security posture and risk.
• You're skilled in stakeholder management and translating technical risks into clear business impact.
• You're proactive and hands-on, capable of driving cultural change and advisory deliverables.
• You are fluent in Dutch, French, and English.

Nice to Haves

• Experience with cloud transformation, data platforms, or AI initiatives.
• Professional certifications such as CISM, CISA, or CISSP.

• Start date: 26/10/2026
• Duration: 6 to 12 months
• Location: Brussels
• Contract: open to both permanent employees and freelancers