Senior Information & NIS2 Compliance Consultant

AddanEx International; Brussel; Hybrid; EUR 90,000 - 130,000; Full time

Job summary

AddanEx International in Brussels is seeking a Senior Information & NIS2 Compliance Consultant on a contract basis. The role will drive compliance with the NIS2 directive, implement information security policies, and coordinate with the organization and its suppliers to harmonize controls.

You will lead audits, inspections, and control activities, monitor progress, and report to stakeholders. The ideal candidate has extensive experience in complex enterprise IT, ISMS deployment (ISO/IEC 27001),

Qualifications

• 10+ years in complex enterprise IT environments.
• 5+ years in information security, operational or organizational context.
• Experience implementing and deploying an ISMS, preferably ISO/IEC 27001.
• Experience in project management, stakeholder management and progress monitoring.
• Experience in audits, inspections and control procedures.
• Experience in public sector or social security is a strong asset.

Responsibilities

• Support compliance with NIS2 obligations by implementing information security policy and the resulting technical and organizational measures.
• Work closely with the organization and its suppliers to develop, harmonize and implement these policies.
• Support audits, inspections and control activities to demonstrate compliance with NIS2 obligations.
• Monitor progress of the work and report to the relevant stakeholders.

Skills

NIS2 knowledge

Information security

ISMS ISO27001

Project management

Audits & controls

Stakeholder management

Communication skills

Job description

Title: Senior Information & NIS2 Compliance Consultant

Location: Brussels (Hybrid 2-3 days onsite weekly)

Type: Contract

Start Date: ASAP

Duration: 15 Months + Extensions

To support an organization in complying with NIS2 obligations (law of 26 April 2024) by supporting the implementation of an information security policy and the resulting technical and organizational measures. To work closely with the organization and its suppliers to develop, harmonize and implement these policies.

Also support the organization in the preparation of audits, inspections and control activities, so that it can demonstrate compliance with the applicable NIS2 obligations. Monitor the progress of the work and report to the relevant stakeholders.

Experience

• At least 10 years of experience in complex enterprise IT environments.
• At least 5 years of experience in information security, in an operational or organizational context.
• Proven experience in the implementation and deployment of an Information Security Management System (ISMS), preferably in accordance with ISO/IEC 27001.
• Experience in project management, stakeholder management and progress monitoring.
• Experience in preparing, supporting and following up on audits, inspections and control procedures.
• Experience in the public sector or social security is a strong asset.

Profile

• In-depth knowledge of the NIS2 Directive and its transposition into Belgian law, the CyberFundamentals (CCB) framework and related information security frameworks.
• Good understanding of technical and organizational security measures and their practical application within organizations.
• Ability to balance cybersecurity risks against business objectives, and communicate about them in a clear and compelling manner.
• Ability to demonstrate compliance (evidence, documentation) to auditors and supervisory authorities.
• Pragmatic approach, capable of translating theoretical principles into feasible and effective measures.
• Autonomy, solid expertise, leadership and persuasiveness.
• Excellent communication skills and ability to work with a variety of internal and external stakeholders.