Senior Security Compliance Officer – NIS2 & ISO 27001

Our client, a prominent organization in the public infrastructure sector, is seeking a Senior Security Compliance Officer to strengthen its cybersecurity governance. The role focuses on building and evolving a compliance framework to meet critical regulatory and normative requirements within a large-scale security program.

• Analyze and translate regulatory and normative requirements into concrete, measurable security controls.
• Develop and maintain control frameworks for NIS2, PCI DSS, and the Cyber Resilience Act (CRA).
• Define evaluation criteria, evidence requirements, and key performance indicators for each security control.
• Establish governance mechanisms to ensure full traceability between risks, controls, and remediation plans.
• Design monitoring and escalation processes for continuous compliance tracking.
• Collaborate with business and IT teams to define maturity levels and reporting structures without direct operational execution.

• You possess 8+ years of experience in IT Security and cybersecurity governance.
• You bring expert-level knowledge of ISO 27001 and the construction of security compliance frameworks.
• You have expert-level expertise in Security Auditing and internal control methodologies.
• You possess deep knowledge of NIS2, PCI DSS, and Cyber Resilience Act (CRA) regulations.
• You have a professional CISM (Certified Information Security Manager) certification.
• You possess an ISO 27001 Lead Auditor certification.
• You're able to translate complex regulatory texts into actionable technical and organizational requirements.
• You are fluent in French or Dutch.

Nice to Haves

• Working knowledge of English.

• Start date: 03/11/2026
• Duration: 13 months
• Work regime: Full-time
• Location: Brussels
• Working model: Hybrid
• Contract: open to both permanent employees and freelancers