We are looking for a senior Chief Information Security Officer (CISO) to strengthen information security governance within our organization.

In the context of increasing digitization of public services and the implementation of new regulations, including NIS2, the CISO will be responsible for structuring, managing, and evolving the organization’s cybersecurity and operational resilience strategy.

Tasks

• Define, update, and manage (program management) the cybersecurity and risk management strategy for the public body, in line with its digital strategy and public service missions.

The adopted framework is Cyfun, from the Centre for Cybersecurity Belgium.

• Conduct or supervise analyses of organizational governance posture, identify priorities, and propose a structured compliance roadmap.
• Design, document, and maintain the Information Security Management System (ISMS: policies, procedures, internal standards, roles and responsibilities, indicators and dashboards).
• Structure and lead crisis management (procedures, organization, simulation exercises), in connection with general management and internal/external stakeholders.
• Ensure regular reporting to management (dashboards, risk indicators, compliance status, progress of the roadmap).
• Supervise colleagues and product teams in the development of the platform.
• Serve as a bridge between business teams, IT, infrastructure, legal, compliance, and suppliers to ensure a transversal and pragmatic approach to cybersecurity.
• Support teams in increasing the organization’s maturity.
• Collaborate with other social security institutions regarding best practices and implementation (policies, IAP+, etc.).
• Ensure knowledge transfer to an internal CISO.

This is a part-time assignment.