Security Consultant – Information Security Officer (NIS2)

About the role

You will be the primary point of contact for information security within the Belgian entity, translating the group’s central security strategy into concrete, NIS2‑compliant measures and processes. The role bridges the group’s security standards with local operational needs.

Key responsibilities

• Develop, align, and maintain the information security policy for Belgium in line with the group’s policy (ISO 2700x, NIST, CIS Controls, CyberFundamentals).
• Coordinate NIS2 implementation, including risk analyses, security measures, reporting to management and the group, and follow‑up of remediation plans.
• Establish and support an ISMS or integrate it into existing management systems.
• Act as the point of contact for audits, internal controls, and NIS2 oversight for the Belgian entity.
• Ensure central security standards are practically applicable locally and provide feedback to the Group Security organization.
• Develop and support NIS2 awareness initiatives for employees.

Required profile

• 3–5 years of experience in information security and cybersecurity governance.
• Strong knowledge of ISO 27001/27002, NIST CSF, CIS Controls, CyberFundamentals, ISO 31000, GDPR and NIS2.
• Experience setting up or supporting an ISMS and preparing for audits.
• Excellent communication skills to explain complex security topics to non‑technical stakeholders.
• Experience in a group/corporate structure is a plus; experience in the energy sector is a plus.
• Fluent Dutch (required) and good English skills.

Required skills

• ISO 27001
• ISO 27002
• NIST Cybersecurity Framework
• CIS Controls
• CyberFundamentals
• ISO 31000
• GDPR
• NIS2 compliance
• ISMS implementation