Expert in Information Security Governance, NIS2 and EASM

Project overview

As part of a 2026-2029 cybersecurity strategy, you will structure the information security function of a public administration subject to NIS2.

Profile of the suited interim professional:

• Perform NIS2 maturity diagnostics and gap analysis concerning security artifacts
• Develop the risk management framework, including strategy, risk appetite, register, and treatment plans
• Lead the management of the external attack surface (EASM), from asset discovery to exposure monitoring
• Formalize priority security policies and support their validation by management
• Support general administrations in implementing security measures, in coordination with the DPO and various stakeholders
• Develop dashboards and files to inform management committee decisions
• Solid experience in information security risk management
• Knowledge of NIS and NIS2 directives, including Belgian laws of 2019 and 2024
• Mastery of CyberFundamentals (CyFun), ISO/IEC 27002, and NIST CSF frameworks
• Experience in external attack surface management (EASM)
• Knowledge of ISO/IEC 27001 and ISO/IEC 27005
• Ability to facilitate workshops and discussions with business departments
• Mastery of French, the exclusive working language of the mission

Project details

• Start: flexible
• Location: Brussel, Flemish Brabant, Brussels, BE
• Languages: French