NIS2 Expert Consultant

About the role

Keystone Solutions is looking for an experienced NIS2 Expert Consultant to help a client establish and structure a NIS2 compliance program. The consultant will work on‑site with the client’s internal Program Manager and key stakeholders to review existing artefacts, define a Minimum Viable Compliance framework and deliver a phased roadmap for sustainable compliance.

Key responsibilities

• Conduct a structured review of the existing NIS2 program using reports, self‑assessments, gap analyses and action plans.
• Clarify the scope of intervention with stakeholders including the sponsor, CISO and GRC team.
• Review mapping of business activities, critical services and dependencies, and align them with cyber‑risk exposure.
• Identify focus areas, quick‑wins and leverage points to prioritize actions based on real risks.
• Define a risk‑based methodological approach and establish a Minimum Viable Compliance framework (scope, governance, critical activity mapping, prioritized actions, evidence elements).
• Provide training, coaching and knowledge‑transfer to the internal Program Manager.
• Develop a phased, iterative roadmap covering immediate actions, priority remediation, industrialisation of management and continuous improvement.
• Deliver periodic progress reports and a final presentation summarising program status, priorities and future trajectory.

Required profile

• Proven experience supporting large organisations in NIS2 compliance and the CYFUN Framework, preferably in the public sector.
• Strong understanding of cyber‑risk assessment, critical service mapping and governance structures.
• Ability to work closely with senior stakeholders (CISO, sponsor, GRC team) and to coach internal programme owners.

Required skills

• NIS2 compliance framework
• CYFUN Framework
• Cyber‑risk assessment
• Governance and programme management