Workplace Security Engineer

EmpHire; Brussel Hoofdstad; On-site; EUR 70,000 - 105,000; Full time

Job summary

EmpHire is seeking an experienced Security Officer specializing in Workplace Security and Data Leakage Protection to strengthen the organisation’s security capabilities. You will protect work devices, digital services, and collaboration platforms with effective controls, policies, and processes.

The role involves risk assessment, roadmaps, and collaboration with IT, privacy, data governance, and business stakeholders to implement security measures.

Qualifications

• Bachelor’s or Master’s degree in Computer Science, Information Systems, Information Security, or a related discipline.
• 5+ years of experience in workplace and endpoint security.
• Experience with endpoint security, encryption, vulnerability management, and anti-malware.
• Experience securing email, web access, NAS and SharePoint.
• Knowledge of Data Leakage Prevention, data classification, and information protection.
• Understanding of ISO 27001/27002, NIST CSF, and NIS2.
• Familiarity with GDPR and data governance.
• IAM experience.
• Ability to analyse security data with scripts or automation.
• Fluent in English; French or Dutch is a plus.

Responsibilities

• Act as security SME and primary contact for workplace security, endpoint protection, and DLP.
• Oversee security of endpoints: Windows, VDI, VMs, and mobile devices.
• Ensure secure configuration of email, web access, and NAS/SharePoint.
• Assess and monitor security controls using ISO 27001.
• Maintain risk assessments and heatmaps with remediation needs.
• Define security strategies and align with risk appetite.
• Present assessments and roadmaps to technical and business stakeholders.
• Define and maintain a security improvement roadmap.
• Lead implementation and continuous improvement of security controls.
• Collaborate with data governance, privacy, and IT teams.
• Support Data Leakage Prevention policies and data protection.
• Align security with GDPR and data handling requirements.
• Develop metrics to monitor control effectiveness.
• Explain security requirements to project teams and oversee implementations.

Skills

English (fluent)

Education

Bachelor’s/Master’s in CS/IS/InfoSec or related

Job description

Security Officer Workplace Security & Data Leakage Protection

The Role

We are looking for an experienced Security Officer specialising in Workplace Security and Data Leakage Protection to strengthen the organisation’s information security capabilities.

You will be responsible for ensuring that workplace devices, digital services, and collaboration platforms are adequately protected through effective security controls, policies, and processes. Your scope will include endpoint security, secure authentication, email and web security, collaborative storage solutions, and Data Leakage Prevention (DLP).

Working closely with security specialists, solution architects, IT teams, data governance, privacy, and business stakeholders, you will assess security risks, define improvement roadmaps, and ensure that security measures are effectively implemented and monitored.

This role combines hands-on security expertise, risk management, stakeholder engagement, and the ability to translate technical security requirements into practical business solutions.

Key Responsibilities

1. Security Oversight & Risk Management

Act as the security subject-matter expert and primary point of contact for workplace security, endpoint protection, secure authentication, and Data Leakage Prevention.

Oversee the security of endpoint devices, including Windows workstations, virtual desktop infrastructure (VDI), virtual machines, and mobile devices.

Ensure the secure configuration of workplace services, including email, web access, and collaborative storage platforms such as NAS and SharePoint.

Assess and monitor the maturity and effectiveness of security controls and processes, using recognised frameworks such as ISO 27001.

Maintain security risk assessments and heatmaps, providing clear visibility of vulnerabilities, control gaps, and areas requiring remediation.

Define security strategies and ensure that risks within your area of responsibility are managed in line with the organisation’s risk appetite.

Prepare and present security assessments, risk reports, roadmaps, and recommendations to technical teams, business stakeholders, management, and internal or external auditors.

2. Security Strategy & Continuous Improvement

Define and maintain a security improvement roadmap based on identified risks, control gaps, regulatory requirements, and evolving business needs.

Contribute to the implementation and continuous improvement of workplace security and data protection controls.

Represent the security function in IT, security, and business projects that may impact workplace environments or information protection.

Define security requirements, review proposed solutions, and validate implementations to ensure security is incorporated throughout the project lifecycle.

Develop and monitor remediation action plans, ensuring identified weaknesses are addressed and sustainable Business-as-Usual (BAU) processes are established.

Work with operational teams to define appropriate security metrics and indicators to monitor the effectiveness of implemented controls.

Collaborate with relevant internal teams and external technology providers to support the evolution of security solutions and services.

Support the definition and implementation of Data Leakage Prevention policies, controls, and procedures.

Contribute to data classification, information protection, encryption, and retention initiatives.

Assess and improve preventive and detective controls designed to reduce the risk of sensitive information being lost, exposed, or shared inappropriately.

Support the configuration and optimisation of data protection technologies, including Microsoft Information Protection and related security capabilities.

Work with data governance and privacy stakeholders to align security controls with information-handling requirements and applicable data protection obligations.

Candidate Profile

Education & Experience

Bachelor’s or Master’s degree in Computer Science, Information Systems, Information Security, or a related discipline, or equivalent professional experience.

At least 5 years of relevant experience in workplace and endpoint security, covering devices, digital workplace services, and information protection.

Strong understanding of endpoint security practices, including workstation hardening, encryption, vulnerability management, anti-malware, phishing protection, and secure device configuration.

Experience securing workplace services such as email, web access, and collaborative storage platforms, including NAS and SharePoint.

Practical knowledge of Data Leakage Prevention, including data classification, information protection policies, and preventive and detective controls, is a strong advantage.

Experience defining security requirements and managing remediation plans through to implementation, operational handover, and ongoing effectiveness monitoring.

Understanding of security risk management, including risk assessments, remediation, and risk acceptance.

Experience with Identity and Access Management (IAM).

Knowledge of Microsoft Information Protection, data classification, encryption, and related data security technologies.

Familiarity with ISO 27001/ISO 27002, the NIST Cybersecurity Framework, and NIS2 considerations.

Understanding of data governance, privacy principles, and GDPR requirements.

Ability to analyse security data using scripts, advanced Excel techniques, automation, or AI-supported tools.

Experience working in complex enterprise IT environments with multiple technical and business stakeholders.

Personal Skills

Strong analytical and problem-solving capabilities, with a structured and risk-based approach.

Excellent organisational skills and the ability to work independently while collaborating effectively with a wider team.

Strong stakeholder management skills and the ability to build trusted relationships across IT, security, data, privacy, and business functions.

Confident communicator, capable of presenting security risks, roadmaps, and technical recommendations to both technical and non-technical audiences.

Ability to influence and negotiate with stakeholders to promote secure-by-design practices while balancing business priorities.

Fluent in spoken and written English. Knowledge of French and/or Dutch is an advantage.

Working Arrangements

Working arrangements and on-site expectations to be confirmed.