Senior Security Compliance Officer

Sloka IT Solutions; Brussel Hoofdstad; Hybride; EUR 80 000 - 110 000; Plein temps

Résumé du poste

Sloka IT Solutions in Belgium seeks a Senior Security Compliance Officer / Consultant to strengthen cybersecurity governance by building, maintaining, and evolving a formal compliance framework. You will translate regulatory requirements (NIS2, PCI DSS, CRA) into measurable controls and evidentiary needs while coordinating with business and IT teams.

This hybrid role focuses on defining objectives, evaluation criteria, and reporting mechanisms, with responsibilities for control repositories,

Qualifications

• Audit expertise and ISO 27001/27k proficiency expected.
• Regulatory compliance experience with security frameworks preferred.

Responsabilités

• Build and maintain control repositories for NIS2, PCI DSS, CRA and other frameworks.
• Translate regulatory requirements into concrete, measurable controls and evidentiary requirements.
• Define governance mechanisms for compliance monitoring and reporting.
• Ensure traceability between regulatory requirements, cybersecurity risks, controls and remediation plans.

Connaissances

Audit expertise

ISO 27K

Description du poste

Job Title: Senior Security Compliance Officer

Duration - Minimum of a year with possible extension

Workplace type - Hybrid

Experience: 6+ Years

Context:

• As part of strengthening its cybersecurity governance and complying with several regulatory and normative requirements, STIB is looking for a Security Compliance Consultant .
• The consultant will work within the cybersecurity program to build, maintain, and develop the compliance framework to meet the requirements of several regulatory and normative frameworks, including:
• NIS2
• PCI DSS
• Cyber Resilience Act (CRA)
• Any other regulatory or normative requirements applicable to the organization
• The mission is primarily focused on building the compliance framework , formalizing requirements, and defining controls. The consultant will not be responsible for the operational implementation of the controls, which will remain the responsibility of the relevant business and IT teams.
• The consultant will be responsible for translating regulatory, normative and cybersecurity requirements into a coherent, measurable, auditable and sustainable compliance framework.
• In this capacity, he will ensure the definition and maintenance of control frameworks, assessment methodologies, evidence requirements and associated reporting mechanisms.

Main responsibilities:

• Construction and maintenance of control repositories
• Analyze the applicable regulatory and normative requirements.
• Translate these requirements into concrete and measurable controls.
• Build and maintain the control repositories associated with:
• NIS2
• PCI DSS
• CRA
• other applicable regulatory frameworks.

Define for each control:

• the objective;
• the evaluation criteria;
• the evidentiary requirements;
• roles and responsibilities;
• the expected level of maturity.
• Compliance Governance
• Maintain traceability between:
• regulatory requirements;
• cybersecurity risks;
• controls;
• remediation plans;
• evidence.
• Define the governance mechanisms that allow for compliance monitoring.
• Participate in defining monitoring and escalation processes.

Roles:

• Senior Compliance OfficerMost recent experience1 to 3 years ago

Skills:

• Audit Expertise Level Expert Most recent experience Any time
• ISO 27K Level Expert Most recent experience Any time

Language:

• Dutch or French Level Native or bilingual proficiency
• English Level Nice to have