NIS2 Cybersecurity Governance Consultant (Part-Time)

About the role

We are seeking an experienced NIS2 Cybersecurity Governance Consultant on a part‑time basis to support the relaunch and structuring of a major NIS2 compliance programme within a critical digital services environment. The consultant will act as a trusted advisor to the internal Programme Manager, helping to establish a sustainable governance framework and a risk‑based approach aligned with NIS2 requirements.

Key responsibilities

• Review and assess the existing NIS2 compliance programme, including gap analyses, assessments, governance documentation and action plans.
• Design and implement a structured governance model covering reporting, prioritisation and decision‑making processes.
• Analyse critical business services, dependencies, suppliers and cyber risks.
• Define a risk‑based methodology for prioritising compliance activities and develop a Minimum Viable Compliance (MVC) approach.
• Identify quick‑win remediation actions and build a phased roadmap for sustainable compliance.
• Support, coach and transfer knowledge to the internal Programme Manager.
• Facilitate workshops with senior stakeholders and produce executive‑level reports and programme updates.

Required profile

• Proven experience delivering NIS2 compliance programmes for essential or important entities.
• Strong background in cybersecurity governance, risk management and compliance.
• Experience establishing governance frameworks and managing compliance programmes.
• Ability to engage with senior stakeholders and produce executive documentation.
• Experience mentoring programme managers or internal teams.

Required skills

• NIS2 compliance
• Cybersecurity governance
• Risk management
• Compliance programme management
• Governance framework development