Lead Information Security & Risk Management

Toreon BV; Town of Belgium (WI); On-site; USD 79,654 - 102,412; Full time

Benefits offered by this job

Competitive salary

Generous training budget

Direct client exposure

Mentorship program

Job summary

Toreon BV, in collaboration with Data Protection Institute, seeks an Information Security Officer to establish risk management frameworks and lead ISMS initiatives for multiple clients in Wallonia. You will identify, prioritize, and address security risks to help organizations reach higher security maturity and obtain relevant certifications.

You will perform security and privacy assessments against ISO27001/2, NIST CSF, GDPR requirements, and translate findings into actionable measures.

Qualifications

• Bachelor or Master degree in economics, IT, or equivalent.
• Certifications in ISO27001 Lead Implementer/Auditor or similar are advantageous.
• Knowledge of ISO27005, ISO31000, COSO, and other risk management standards.
• Experience implementing and maintaining ISMS and conducting audits.

Responsibilities

• Set up risk management frameworks and identify priorities within risk treatment plans.
• Implement and manage Information Security Management System (ISMS).
• Perform security and privacy assessments per standard requirements.
• Define policies, processes, and standards to improve security posture.
• Report findings and translate them into concrete measures for clients.

Skills

Security risk management

ISMS implementation

ISO27001/2 knowledge

Security standards (NIST/ COSO)

Audit & assessment

Business translation to tech

Dutch & English proficiency

Project management

Education

Bachelor or Master in economics or IT (or equivalent)

Tools

ISO27001 Lead Implementer

ISO27001 Lead Auditor

CISM

CISSP

CISA

Job description

Toreon BV, in collaboration with Data Protection Institute, seeks an Information Security Officer to establish risk management frameworks and lead ISMS initiatives for multiple clients in Wallonia. You will identify, prioritize, and address security risks to help organizations reach higher security maturity and obtain relevant certifications.

You will perform security and privacy assessments against ISO27001/2, NIST CSF, GDPR requirements, and translate findings into actionable measures.