Expert Cybersecurity

Function

We're looking for an experienced Cybersecurity Expert to join our client's team and help strengthen its information security strategy and overall digital resilience. This is an opportunity to combine strategic thinking with hands-on security management, taking ownership of key initiatives that protect systems, data, and business processes. You'll play a central role in maturing the organisation's security framework, strengthening governance and compliance, and driving progress towards ISO 27001 certification.

Key Responsibilities

• Manage and continuously improve the Information Security Management System (ISMS), including policies, procedures, documentation, and review cycles.
• Lead and support initiatives towards ISO 27001 certification, ensuring alignment with relevant security standards and regulatory requirements.
• Identify, assess, and monitor information security risks, maintain the risk register, and define appropriate mitigation measures.
• Report on security risks, incidents, KPIs, and progress to management and relevant governance bodies.
• Ensure compliance with applicable frameworks and regulations, including ISO 27001, NIS2, and CyberFundamentals (CyFun).
• Prepare and coordinate internal and external audits, maintain the Statement of Applicability, and ensure audit evidence is properly documented.
• Maintain the Incident Response Plan and coordinate incident management, investigation, and follow-up actions.
• Contribute to business continuity and disaster recovery planning from an information security perspective.
• Assess supplier and supply-chain risks and monitor security requirements for critical external partners.
• Coordinate external security specialists and follow up on vulnerability management, patch management, security monitoring, and identity and access management.
• Promote security awareness through communication, training, and targeted awareness initiatives.
• Advise management and business stakeholders on security priorities, emerging risks, and ongoing improvement initiatives.

Your Profile

• Master's degree, preferably in ICT or business administration, or equivalent professional experience.
• At least five years of experience in cybersecurity, information security, or ICT risk management.
• Strong knowledge of security frameworks and standards, particularly ISO 27001, NIS2, and CyberFundamentals (CyFun).
• Proven experience with risk management, audits, compliance, and the implementation or management of an ISMS.
• Good understanding of modern IT environments, including infrastructure, cloud services, identity management, and security solutions.
• Familiarity with security operations, vulnerability and incident management, and supplier security assessments.
• Experience in healthcare or in protecting sensitive personal data is a strong asset.
• Excellent analytical and organisational skills, with the ability to translate complex security requirements into practical recommendations and actionable plans.
• Strong communication skills and the ability to engage effectively with operational teams, business stakeholders, and senior management.
• Certifications such as CISSP, CISM, ISO 27001 Lead Implementer, or ISO 27001 Lead Auditor are considered a plus.
• Fluent Dutch and a good command of English.

Practical Information

• Workload: Full-time or 4/5 employment.
• On-site presence: At least two days per week, with fixed office days on Tuesday and Thursday.

If you're passionate about cybersecurity and enjoy combining governance, risk management, and practical security improvements, this role offers the opportunity to make a meaningful contribution to an organisation's long-term security maturity and resilience.

Contactperson & Reference

• Reference #: INW28368
• Marilyn Weytens
• marilyn.weytens@i4m.be