Expert Cybersecurity

In4Matic; Belgique (MO); Ibrido; USD 101.000 - 146.000; Tempo pieno

Descrizione del lavoro

In4Matic is seeking an experienced Cybersecurity Expert to strengthen its information security strategy and digital resilience. You will own key initiatives, drive ISO 27001 certification, and coordinate audits while maturing governance, risk management and incident response across the organisation.

The role requires 5+ years in cybersecurity, strong knowledge of ISO 27001/NIS2/CyFun, and excellent communication with stakeholders. On-site presence required with two fixed office days per week.

Competenze

• Master's degree or equivalent professional experience in ICT, information security or related field
• 5+ years of cybersecurity, information security or ICT risk management experience
• Strong knowledge of ISO 27001, NIS2 and CyberFundamentals (CyFun)
• Experience with ISMS implementation, risk management, audits and compliance
• Familiarity with security operations, vulnerability and incident management
• Excellent analytical, organizational and communication skills
• Fluent Dutch and good English proficiency
• CISSP, CISM, ISO 27001 Lead Implementer/Auditor certifications are a plus

Mansioni

• Manage and continuously improve the Information Security Management System (ISMS) including policies, procedures and review cycles
• Lead and support ISO 27001 certification efforts and ensure regulatory alignment
• Identify, assess and monitor information security risks and maintain the risk register
• Report security risks, incidents, KPIs and progress to management and governance bodies
• Ensure compliance with ISO 27001, NIS2 and CyFun frameworks and regulations
• Coordinate internal and external audits and maintain the Statement of Applicability
• Maintain the Incident Response Plan and coordinate incident management and follow-up actions
• Contribute to business continuity and disaster recovery planning from an information security perspective
• Assess supplier and supply-chain risks and monitor security requirements for partners
• Coordinate external security specialists and follow up on vulnerability, patch management and IAM
• Promote security awareness through training and targeted initiatives
• Advise management on security priorities and ongoing improvement efforts

Descrizione del lavoro

Function

We're looking for an experienced Cybersecurity Expert to join our client's team and help strengthen its information security strategy and overall digital resilience. This is an opportunity to combine strategic thinking with hands-on security management, taking ownership of key initiatives that protect systems, data, and business processes. You'll play a central role in maturing the organisation's security framework, strengthening governance and compliance, and driving progress towards ISO 27001 certification.

Key Responsibilities

• Manage and continuously improve the Information Security Management System (ISMS), including policies, procedures, documentation, and review cycles.
• Lead and support initiatives towards ISO 27001 certification, ensuring alignment with relevant security standards and regulatory requirements.
• Identify, assess, and monitor information security risks, maintain the risk register, and define appropriate mitigation measures.
• Report on security risks, incidents, KPIs, and progress to management and relevant governance bodies.
• Ensure compliance with applicable frameworks and regulations, including ISO 27001, NIS2, and CyberFundamentals (CyFun).
• Prepare and coordinate internal and external audits, maintain the Statement of Applicability, and ensure audit evidence is properly documented.
• Maintain the Incident Response Plan and coordinate incident management, investigation, and follow-up actions.
• Contribute to business continuity and disaster recovery planning from an information security perspective.
• Assess supplier and supply-chain risks and monitor security requirements for critical external partners.
• Coordinate external security specialists and follow up on vulnerability management, patch management, security monitoring, and identity and access management.
• Promote security awareness through communication, training, and targeted awareness initiatives.
• Advise management and business stakeholders on security priorities, emerging risks, and ongoing improvement initiatives.

Your Profile

• Master's degree, preferably in ICT or business administration, or equivalent professional experience.
• At least five years of experience in cybersecurity, information security, or ICT risk management.
• Strong knowledge of security frameworks and standards, particularly ISO 27001, NIS2, and CyberFundamentals (CyFun).
• Proven experience with risk management, audits, compliance, and the implementation or management of an ISMS.
• Good understanding of modern IT environments, including infrastructure, cloud services, identity management, and security solutions.
• Familiarity with security operations, vulnerability and incident management, and supplier security assessments.
• Experience in healthcare or in protecting sensitive personal data is a strong asset.
• Excellent analytical and organisational skills, with the ability to translate complex security requirements into practical recommendations and actionable plans.
• Strong communication skills and the ability to engage effectively with operational teams, business stakeholders, and senior management.
• Certifications such as CISSP, CISM, ISO 27001 Lead Implementer, or ISO 27001 Lead Auditor are considered a plus.
• Fluent Dutch and a good command of English.

Practical Information

• Workload: Full-time or 4/5 employment.
• On-site presence: At least two days per week, with fixed office days on Tuesday and Thursday.

If you're passionate about cybersecurity and enjoy combining governance, risk management, and practical security improvements, this role offers the opportunity to make a meaningful contribution to an organisation's long-term security maturity and resilience.

Contactperson & Reference

• Reference #: INW28368
• Marilyn Weytens
• [e-mail]