Corporate Information Security Officer (NIS2 Project Manager)

About the role

You will join the Chief Security Office and report directly to the Chief Security Officer. The role focuses on defining and implementing the organisation's cybersecurity vision, with a priority on achieving STIB's NIS2 Essential certification.

Key responsibilities

• Implement company‑defined cybersecurity initiatives in coordination with IT.
• Draft, maintain and enforce information security policies aligned with risk appetite and regulatory requirements.
• Lead NIS2 compliance activities, defining, implementing and monitoring action plans for STIB certification.
• Monitor the implementation of security measures to protect data, systems and networks.
• Collaborate with internal teams to embed security requirements into existing processes.
• Serve as a point of contact for information‑security issues outside the IT scope, supported by senior staff.
• Translate technical concepts for non‑technical audiences and contribute to cybersecurity awareness actions.
• Stay up‑to‑date with cybersecurity trends, regulations and best practices, and prepare reports on the security posture.

Required profile

• First professional experience or internship in cybersecurity, information security or IT (approximately 4 years).
• Bachelor’s or master’s degree in Computer Science, Information Security or a related field.
• Interest in security governance and information‑security policies.
• Basic or pending certifications such as Security+ or ISO 27001 Foundation are an asset.
• Project‑management experience and strong analytical abilities.
• Good communication skills and ability to work in a team.

Required skills

• ISO 27001
• NIST Cybersecurity Framework
• NIS2
• Security+ (or equivalent)
• ISO 27001 Foundation (or equivalent)
• Project Management