CISO Officer

Function

We’re looking for a cybersecurity professional to join our client’s security organization as a CISO Officer specializing in Third Party Risk Management. In this role, you will contribute to securing a complex digital ecosystem by ensuring that cybersecurity risks linked to suppliers, partners, vendors, and service providers are properly assessed and managed. You will also support the integration of cybersecurity requirements within procurement and tendering processes, ensuring alignment with regulatory frameworks, internal security policies, and industry standards.

Role

As part of the security governance framework, you will oversee cybersecurity risk management related to third parties throughout their entire lifecycle. You will ensure that security commitments with external partners remain compliant, traceable, and aligned with internal policies and regulatory expectations.

Your responsibilities include:

• Establishing, maintaining, and improving the third-party cybersecurity risk management framework

• Identifying and assessing cybersecurity risks related to suppliers, partners, and service providers

• Reviewing security questionnaires, certifications, policies, and audit documentation

• Assessing proposed architectures and technical solutions from a security perspective

• Defining mitigation actions, risk acceptance conditions, and monitoring associated action plans

Procurement & Tender Security

You will play an important role in ensuring that cybersecurity requirements are embedded in procurement processes and supplier engagements.

Key responsibilities include:

• Reviewing and securing cybersecurity requirements within procurement processes such as RFI, RFC, RFQ, RFP, and tender documentation

• Evaluating supplier proposals from a security, compliance, and risk management perspective

• Supporting stakeholders in drafting security-related responses and identifying potential risks or conditions

• Collaborating with procurement, legal, IT, and business teams to ensure alignment with security standards and regulatory frameworks

Profile

The ideal candidate is a cybersecurity professional with strong analytical skills and experience in governance, risk management, and supplier security assessments.

Required skills and experience:

• Minimum 5 years of experience in cybersecurity-related roles such as Third Party Risk Management, Security Assurance, GRC/compliance, audit, or security assessments

• Strong knowledge of cybersecurity frameworks and standards such as ISO 27001 / 27002, NIS2, GDPR, ISO 27036, ISA/IEC 62443 or similar

• Experience reviewing procurement and tender documentation including RFI, RFC, RFQ, and RFP processes

• Ability to assess security requirements, supplier documentation, and complex contractual materials

• Strong analytical thinking and ability to produce structured and clear deliverables

• Experience working with multiple stakeholders including IT, procurement, legal teams, and business units

Additional requirements:

• Master’s degree in a relevant field (IT, information security, risk management, law) or a Bachelor’s degree with significant cybersecurity experience

• Fluency in Dutch, French, and English (written and spoken)

• Ability to work autonomously with strong prioritization skills and a solution-oriented mindset

• Hybrid work environment with on-site presence required approximately two days per week