Senior Security Compliance Lead: NIS2 & ISO 27001 (Hybrid)

Pauwels Consulting; Brussel; Hybride; EUR 90 000 - 120 000; Plein temps

Résumé du poste

Pauwels Consulting is seeking a Senior Security Compliance Officer in Brussels to strengthen cybersecurity governance. You will translate regulatory requirements into concrete controls, and build and maintain compliance frameworks for NIS2, PCI DSS and the Cyber Resilience Act.

You will define KPIs, establish governance for risk-to-control traceability, and design monitoring processes while collaborating with business and IT teams to define maturity and reporting structures.

Qualifications

• 8+ years in IT Security and cybersecurity governance.
• ISO 27001 expert, security compliance framework construction.
• Expert in Security Auditing and internal control methodologies.
• Deep knowledge of NIS2, PCI DSS, and CRA regulations.
• CISM certification.
• ISO 27001 Lead Auditor certification.
• Able to translate regulatory texts into actionable requirements.
• Fluent in French or Dutch.

Responsabilités

• Analyze and translate regulatory requirements into concrete, measurable security controls.
• Develop and maintain control frameworks for NIS2, PCI DSS, and CRA.
• Define evaluation criteria, evidence requirements, and KPIs for each control.
• Establish governance for traceability between risks, controls and remediations.
• Design monitoring and escalation processes for continuous compliance.
• Collaborate with business and IT to define maturity levels and reporting structures.

Connaissances

IT Security

Cyber Governance

ISO 27001

Security Auditing

NIS2

PCI DSS

Cyber Resilience Act

CISM

ISO Lead Auditor

French/Dutch

Formation

CISM

ISO 27001 Lead Auditor

Description du poste

Pauwels Consulting is seeking a Senior Security Compliance Officer in Brussels to strengthen cybersecurity governance. You will translate regulatory requirements into concrete controls, and build and maintain compliance frameworks for NIS2, PCI DSS and the Cyber Resilience Act.

You will define KPIs, establish governance for risk-to-control traceability, and design monitoring processes while collaborating with business and IT teams to define maturity and reporting structures.