Information Security Officer

About the role

We are looking for an experienced Information Security Officer to join a large enterprise client as a consultant. You will work closely with IT, business stakeholders and project teams to strengthen the client’s security posture, manage cyber risks and ensure regulatory compliance.

Key responsibilities

• Act as the go‑to expert for Information Security, Compliance and Governance across initiatives.
• Support implementation, maintenance and continuous improvement of the Information Security Management System (ISMS).
• Conduct compliance reviews, control assessments and drive remediation activities to closure.
• Plan and execute internal audits, track findings and manage corrective actions.
• Lead security risk assessments and compliance evaluations for business and technology functions.
• Develop, maintain and enhance security policies, standards, procedures and governance frameworks.
• Provide guidance on regulatory and cybersecurity requirements, aligning with industry best practices.

Required profile

• Strong experience in Information Security, GRC, Risk Management, Compliance or IT Audit.
• Proven track record implementing, maintaining or auditing ISO‑based management systems.
• Deep understanding of ISO 27001, ISMS governance and related control frameworks.
• Knowledge of NIS2, cybersecurity governance, risk management and regulatory compliance.
• Experience assessing and managing third‑party and supplier security risks.
• Excellent stakeholder management and communication skills, able to engage technical and non‑technical audiences.
• Fluent in English and either Dutch or French (both advantageous).

Required skills

• ISO 27001
• Information Security Management System (ISMS)
• NIS2
• Governance, Risk and Compliance (GRC) frameworks
• Risk management and compliance assessment
• Third‑party security risk assessment