CISO – Brussels

Project overview

Introduction

IT-Planet is the HR specialist for flexible and temporary staffing in IT. We handle IT projects for various top 100 clients throughout Flanders and Brussels in the following IT domains: Application Development, Infrastructure Services & Software Testing. With 15 years of experience, we can perfectly meet your individual needs. With us, you can and may grow and learn, in short, flourish in your job. Sounds good? We already have 180 great colleagues on projects. To further strengthen our team, we are currently looking for a Chief Information Security Officer (m/f/x) to start with our client in Brussels.

Function

Job Requirements

Offer

What comes with it

You will be compensated according to your tasks, knowledge, and competencies. We will carefully develop a motivating salary package, including an attractive fringe benefits package with group and hospitalization insurance, meal vouchers, eco-cheques, an annual budget for the purchase of personal IT equipment, etc. We also offer you a company car with a charging or fuel card.

What really counts

You and your personal wishes and needs are central to us. Through personal follow-up and contact, we strive together for your desired career. We offer you the growth opportunities and challenges you aspire to, and guide you through a professional training and development policy. We consider work-life balance important; in this context, we also offer flexibility. Additionally, we organize many great events annually, to which you are always invited! We also sponsor several festivals each year!

All of the above, and much more, ensures that we win the Great Place to Work award year after year!

Freelance? Don't hesitate to contact us for a tailor-made proposal. And yes, as a freelancer, you can also benefit from training and events through IT-Planet!

Information

Interested? Send your CV and possibly your cover letter to [contact removed] attn: {{name}} or call us at {{phone number}}

• This position can be filled with both a permanent contract (employee status) and a freelance contract
• Duration: Long term
• Region: Brussels
• Full time
• Develop and operationalize the cybersecurity strategy and multi-year roadmap.
• Build and maintain the Information Security Management System (ISMS) and the governance framework.
• Lead the Security by Design program and integrate security into projects, processes, systems, and digital initiatives.
• Identify, analyze, and monitor cyber risks, including risk registers, treatment plans, and residual risks.
• Integrate cyber risk management into Enterprise Risk Management.
• Advise business and IT on cybersecurity, cloud, data, AI, and digital transformations.
• Develop and maintain security policies, standards, and guidelines.
• Guide audits, gap assessments, maturity assessments, and control assessments.
• Oversee compliance with ISO 27001, NIS2, GDPR, and relevant sectoral obligations.
• Review penetration tests, risk analyses, and technical security assessments.
• Develop KPIs, KRIs, and reports for management, the Audit Committee, and the Board of Directors.
• Monitor security incidents, root cause analyses, and structural improvement actions from the second line.
• Support Third-Party Risk Management and security assessments of critical suppliers.
• Develop security awareness and an organization-wide safety culture.
• Create buy-in and stimulate collaboration between management, business, IT, and other stakeholders.
• Monitor the progress and effectiveness of the cybersecurity program and independently escalate material risks.
• At least 10 years of relevant experience in cybersecurity, information security, cyber risk management, or cybersecurity governance.
• Demonstrable experience as CISO, vCISO, or senior cybersecurity advisor.
• Experience with developing and managing multi-year cybersecurity and transformation programs.
• Thorough knowledge of ISO 27001, NIS2, GDPR, cyber risk management, and cybersecurity governance.
• Sufficient technical knowledge to assess risk analyses, penetration tests, and security assessments in substance.
• Broad knowledge of IAM, data protection, DevSecOps, detection and response, and Third-Party Risk Management.
• Experience with audits, maturity assessments, and monitoring improvement measures.
• Experience with reporting to management, the Audit Committee, or the Board of Directors.
• Strategic insight combined with a pragmatic, hands-on approach.
• Strong communication skills and the ability to translate technical risks into concrete business impact.
• Strong in stakeholder management, advising, persuasion, and creating buy-in.
• Ability to advise independently and critically from a second-line function, respecting the ownership of business and IT.
• Willingness to develop analyses, concrete solutions, and deliverables yourself.
• Added value: experience with digitalization, cloud transformation, data, and AI initiatives.

Project details

• Start: flexible
• Duration: Lange termijn
• Location: Brussel, BE
• Languages: Dutch