CISO Officer – Information Security Consultant

About the role

Keystone Solutions is seeking an experienced Information Security Officer / CISO consultant to support a client in the railway infrastructure and technologies sector. You will work closely with the client’s IT department to develop and execute their information security strategy while operating within a collaborative, multidisciplinary environment.

Key responsibilities

• Define, implement and monitor the client’s information security strategy.
• Conduct security risk assessments for technology projects and data management.
• Establish and maintain an information security governance framework, including ISO 27001 compliance.
• Support regulatory compliance efforts, notably GDPR.
• Design and deliver security awareness programmes across the organisation.
• Draft, publish and enforce information security policies.
• Provide security guidance to operational IT teams on application development, change management and architecture.
• Serve as the primary contact for security and GDPR matters with stakeholders.
• Coordinate outsourced security activities such as penetration testing.
• Report to the TNM Resource Manager and senior client management.

Required profile

• Minimum 10 years of experience in information security, project management and stakeholder engagement.
• Strong knowledge of security regulations and data‑privacy standards.
• Proven ability to set up and manage an Information Security Management System (e.g., ISO 27001).
• Professional security certifications are a strong asset.
• Excellent communication and coordination skills.
• Fluency in Dutch and/or French (C2) and operational knowledge of the second national language (B2); English at B1 level is a plus.

Required skills

• ISO 27001
• GDPR
• Penetration testing