Business Security Officer

Project overview

This contract role will strengthen cybersecurity for power plants by shaping industrial security architectures, defining controls, and managing cybersecurity projects from planning through reporting. The key requirements are industrial cybersecurity and ICS knowledge, power plant operational understanding, experience with DCS environments, security frameworks, assessments, and stakeholder coordination; professional French and English are also required. Dutch and relevant certifications such as CISSP, CISM, GICSP, IEC 62443, ISO 27005, CEH, or PMP are advantages.

The structured input gives an 8–10-year experience band, while the description separately states a minimum of three years in industrial cybersecurity, preferably in power generation or critical infrastructure. The position is based in Linkebeek, Belgium, with three days onsite and two days remote, and requires travel mainly in France and Belgium and a valid driver's license.

Responsibilities

• Willingness to travel, primarily within France and Belgium, Professional proficiency in French and English; knowledge of Dutch is considered an advantage.
• Strengthen cybersecurity across power plants while ensuring the effective protection of industrial assets.
• Lead and/or support projects involving the design and implementation of industrial cybersecurity architectures, define technical security requirements, and specify cybersecurity controls for the integration of new systems and enhancement of existing ones.
• Manage industrial cybersecurity projects throughout their lifecycle, including planning, stakeholder coordination, risk management, execution, and reporting.
• Contribute to the development of industrial cybersecurity capabilities and promote cybersecurity awareness among project managers and other stakeholders.
• Ensure compliance with ENGIE Group cybersecurity standards, policies, and procedures, and support adherence to applicable regulations and frameworks, including NIS2.
• Define and conduct cybersecurity assessments and audits to evaluate the security posture of power plants.
• Define security validation and testing strategies and ensure that resulting recommendations are appropriately implemented.
• Monitor emerging cybersecurity threats, vulnerabilities, and industry trends, and integrate relevant insights into security architecture and risk management practices.
• Minimum 3 years of experience in industrial cybersecurity, preferably within power generation or critical infrastructure environments.
• Proven experience implementing industrial cybersecurity frameworks across power plants or industrial sites.
• Experience leading industrial cybersecurity assessments and reviews in power plants.

Requirements

• Industrial cybersecurity experience and implementation of cybersecurity frameworks at industrial sites
• Understanding of power plant operations and industrial control systems (ICS)
• Experience with distributed control systems (DCS), including environments such as GE Vernova or Emerson
• Ability to design industrial cybersecurity architectures and specify security requirements and controls
• Experience conducting industrial cybersecurity assessments, reviews, or audits
• Knowledge of industrial security standards and frameworks such as IEC 62443, ISO 27001, or NIST Cybersecurity Framework
• Industrial cybersecurity project lifecycle management and stakeholder coordination
• Professional proficiency in French and English

Project details

• Start: flexible
• Remote: hybrid
• Location: Belgium, BE