Senior Chief Information Security Officer – ISO 27001 & Risk Governance

Our client, a prominent organization in the professional services sector, is looking for a Senior Chief Information Security Officer to drive their cybersecurity strategy and risk management. This role focuses on operationalizing governance frameworks and embedding a Security by Design approach across the enterprise within the second line of defense.

• Develop and operationalize the cybersecurity strategy and multi-year program to enhance organizational resilience.
• Integrate cyber risks into the broader Enterprise Risk Management (ERM) framework and strategic decision-making processes.
• Lead the implementation of Security by Design across digital transformation, cloud, and AI initiatives.
• Maintain the Information Security Management System (ISMS) and governance framework in alignment with international standards.
• Report on risk profiles, maturity levels, and investment needs to executive management and the Board of Directors.
• Foster a security-aware culture by building coalitions and empowering a network of security champions.

• You have 8+ years of experience in cybersecurity, information security management, or cyber risk governance.
• You bring proven experience as a CISO or senior cybersecurity advisor managing large-scale transformation programs.
• You possess expert knowledge of ISO 27001, NIS2, and GDPR compliance frameworks.
• You have technical proficiency in evaluating risk analyses, penetration tests, and security assessments.
• You bring broad knowledge of IAM, Data Protection, and DevSecOps methodologies.
• You possess experience reporting to executive boards and audit committees regarding security posture and risk.
• You're skilled in stakeholder management and translating technical risks into clear business impact.
• You're proactive and hands-on, capable of driving cultural change and advisory deliverables.
• You are fluent in Dutch, French, and English.

Nice to Haves

• Experience with cloud transformation, data platforms, or AI initiatives.
• Professional certifications such as CISM, CISA, or CISSP.

• Start date: 26/10/2026
• Duration: 6 to 12 months
• Location: Brussels
• Contract: open to both permanent employees and freelancers