Senior Program Manager – Cybersecurity & NIS2

Pauwels Consulting; Antwerpen; Hybrid; EUR 120,000 - 180,000; Full time

Job summary

Pauwels Consulting seeks a high-level cybersecurity and governance leader to drive organization-wide NIS2 compliance roadmaps, audits, and change programs in the public sector from Antwerp. Hybrid work arrangement offered.

Ideal candidate has 15+ years in cybersecurity, 10+ in CISO/GRC roles, and 10+ years managing infrastructure or software projects, with PM frameworks and ISO/NIS2/DORA expertise. Dutch language required for stakeholder engagement.

Qualifications

• 15+ years of experience in Cybersecurity and Information Security.
• 10+ years in a CISO, Security Officer, or GRC lead role.
• 10+ years managing infrastructure or software development projects.
• 8+ years leading multi-year programs using Prince2, PMBOK, or MSP.
• Thorough knowledge of ISO/IEC 27000-series, ISO 31000, CIS Controls, NIS2, and DORA.
• Extensive experience with audit methodologies including ISO27001, ISAE 3402, SOC1, and SOC2.
• Experience in the public sector or highly regulated environments.
• Familiarity with ITIL, Agile, and Scrum.
• Proactive communicator with training/public speaking experience.
• Native Dutch speaker.

Responsibilities

• Design, manage, and monitor NIS2 compliance programs and strategic roadmaps.
• Coordinate cybersecurity assessments, maturity measurements, and gap analyses.
• Lead and align internal teams and external consultants across multiple parallel projects.
• Coordinate internal and external audits including ISO, ISAE, and SOC frameworks.
• Translate audit findings into concrete action plans and policy adjustments.
• Manage program-level risks, scope, budget, and dependencies.
• Report on progress and strategic alignment to executive management and steering committees.

Skills

Cybersecurity

Information Security

GRC

CISO leadership

Infrastructure PM

Software PM

Prince2

PMBOK

MSP

ISO27000

ISO31000

CIS Controls

NIS2

DORA

ISO27001

ISAE3402

SOC1

SOC2

Public sector

ITIL

Agile

Scrum

Public speaking

Dutch

DPO

GDPR

DPIAs

MITRE ATT&CK

OWASP

SABSA

TOGAF

SAMM

Job description

Our client, a leading organization in the public sector, is seeking a high-level specialist to lead organization-wide cybersecurity and audit programs. The project focuses on establishing NIS2 compliance roadmaps and driving complex governance and change management initiatives across IT and business departments.

• Design, manage, and monitor NIS2 compliance programs and strategic roadmaps.


• Coordinate cybersecurity assessments, maturity measurements, and gap analyses.


• Lead and align internal teams and external consultants across multiple parallel projects.


• Coordinate internal and external audits including ISO, ISAE, and SOC frameworks.


• Translate audit findings into concrete action plans and policy adjustments.


• Manage program-level risks, scope, budget, and dependencies.


• Report on progress and strategic alignment to executive management and steering committees.

• You possess 15+ years of experience in Cybersecurity and Information Security.


• You possess 10+ years of experience in a CISO, Security Officer, or GRC lead role.


• You possess 10+ years of experience managing infrastructure or software development projects.


• You have 8+ years of experience leading multi-year programs using methodologies such as Prince2, PMBok, or MSP.


• You bring thorough knowledge of ISO/IEC 27000-series, ISO 31000, CIS Controls, NIS2, and DORA.


• You have extensive experience with audit methodologies including ISO27001, ISAE 3402, SOC1, and SOC2.


• You bring experience working within the public sector or highly regulated environments.


• You have experience with ITIL, Agile, and Scrum methodologies.


• You are a proactive communicator with experience as a trainer or public speaker.


• You are native in Dutch.

Nice to Haves

• Experience as a DPO or trusted advisor for management and regulatory bodies.


• Knowledge of GDPR implementations, DPIAs, and privacy governance.


• Knowledge of frameworks such as MITRE ATT&CK, OWASP, SABSA, TOGAF, or SAMM.

• Start date: 12/05/2026


• Duration: until 15/07/2027


• Work regime: Full-time


• Location: Antwerp


• Working model: Hybrid


• Contract: open to both permanent employees and freelancers