Cyber Security Risk Assurance Consultant

About the role

Join the NPM security team as a Cyber Security Risk Assurance Consultant. You will help protect the business, its customers, and critical services by strengthening cyber‑resilience across major transformation programs and ensuring compliance with security standards.

Key responsibilities

• Advise project teams during design and execution, ensuring compliance with security requirements and recommending appropriate technical controls.
• Maintain oversight of baseline compliance, flagging and documenting any deviations or risks.
• Analyze vulnerability reports, audit findings, and penetration‑test results, assess risk, and develop remediation plans.
• Support integration of security tooling such as vulnerability scanners, SIEM, PAM, and PKI into service platforms.
• Collaborate with technical teams to reduce operational and technology risks.
• Help define and track security metrics for consistent risk reporting.
• Provide security requirements for RfQs/RfPs, evaluate vendor responses, and advise stakeholders.
• Conduct recurring access reviews, recertifications, and optimize access rights in line with Belgian and European regulations.
• Review change requests, document associated risks, and facilitate mitigation.
• Report to the divisional security officer.

Required profile

• Bachelor’s or Master’s degree in IT, cyber security, or a related field, or equivalent experience.
• Solid knowledge of information security, risk management, and compliance frameworks.
• Industry‑recognized certifications such as CISSP or CISM are highly valued.
• Strong interpersonal and communication skills, with a collaborative, can‑do attitude and effective stakeholder management.

Required skills

• Vulnerability scanning tools
• Security Information and Event Management (SIEM)
• Privileged Access Management (PAM)
• Public Key Infrastructure (PKI)