Senior Security Compliance Officer

In4Matic; Belgique; Hybrid; EUR 90,000 - 120,000; Full time

Job summary

In4Matic is seeking an experienced Cybersecurity Compliance Specialist to strengthen a mature, auditable cybersecurity compliance framework. You will translate regulatory requirements into practical controls and ensure traceability between risks, requirements, controls and supporting evidence.

You will collaborate with cybersecurity, risk, governance and IT security stakeholders in a hybrid environment, translating complex obligations into actionable processes.

Qualifications

• Significant professional experience in cybersecurity compliance, IT audit or security governance.
• Over 10 years in IT security with strong understanding of audit methodologies.
• Ability to translate regulatory requirements into practical control measures and evidence.

Responsibilities

• Analyze regulatory and normative requirements and translate them into clear, measurable cybersecurity controls.
• Develop, structure and maintain control frameworks aligned with requirements such as NIS2, PCI DSS, the Cyber Resilience Act and relevant security standards.
• Define control objectives, evaluation criteria, evidence requirements, ownership, responsibilities, indicators and expected maturity levels.
• Establish and maintain traceability between regulatory requirements, cybersecurity risks, controls, remediation plans and audit evidence.
• Support the implementation of governance mechanisms for effective compliance monitoring.
• Contribute to monitoring, reporting and escalation processes.
• Support audit activities and help ensure that compliance documentation and evidence remain complete, consistent and audit-ready.
• Work with cybersecurity, risk, governance and operational stakeholders to embed compliance requirements into practical processes.

Skills

Audit practices

ISO 27K standards

Cybersecurity governance

Regulatory requirements translation

Evidence management

Stakeholder communication

Education

CISM certification (advantage)

ISO 27001 Lead Auditor (advantage)

Job description

Function

We’re looking for an experienced Cybersecurity Compliance Specialist to join our client’s team and help strengthen a mature, structured and auditable cybersecurity compliance framework. You’ll work at the intersection of cybersecurity governance, risk and compliance, translating complex regulatory and normative requirements into practical controls that can be measured, monitored and continuously improved.

The role offers the opportunity to contribute to a sustainable control environment covering regulatory requirements and international security standards, while ensuring clear traceability between risks, requirements, controls, remediation activities and supporting evidence.

Responsibilities

• Analyze regulatory and normative requirements and translate them into clear, measurable and actionable cybersecurity controls.

• Develop, structure and maintain control frameworks aligned with requirements such as NIS2, PCI DSS, the Cyber Resilience Act and relevant security standards.

• Define control objectives, evaluation criteria, evidence requirements, ownership, responsibilities, indicators and expected maturity levels.

• Establish and maintain traceability between regulatory requirements, cybersecurity risks, controls, remediation plans and audit evidence.

• Support the implementation of governance mechanisms for effective compliance monitoring.

• Contribute to monitoring, reporting and escalation processes.

• Support audit activities and help ensure that compliance documentation and evidence remain complete, consistent and audit-ready.

• Work with cybersecurity, risk, governance and operational stakeholders to embed compliance requirements into practical processes.

Profile

You have significant professional experience in cybersecurity compliance, IT audit or security governance and are comfortable structuring complex regulatory requirements into clear and workable frameworks. You bring more than 10 years of experience in IT security and have a strong understanding of audit methodologies and cybersecurity governance.

Key expertise includes:

• Expert-level knowledge of audit practices.

• Expert knowledge of ISO 27K standards and frameworks.

• Strong understanding of cybersecurity governance, risk and compliance.

• Ability to interpret regulatory requirements and translate them into practical control measures.

• Experience defining control ownership, evidence requirements, evaluation criteria and maturity expectations.

• Strong analytical and documentation skills, with a structured and detail-oriented approach.

• Experience working in complex enterprise environments and communicating effectively with both technical and non-technical stakeholders.

A CISM certification is an advantage, as is an ISO 27001 Lead Auditor certification.

Working Environment

You are pragmatic, analytical and able to work independently while collaborating effectively with security, compliance, audit and business stakeholders. You have a strong sense of ownership and are comfortable challenging existing practices and helping establish clear, sustainable governance processes.

The assignment follows a hybrid working model, combining on-site and remote work. Professional fluency in Dutch or French is required; English is considered an advantage.

Contactperson & Reference

• Reference #: INW28180
• Pieter Messely
• [e-mail]