We are looking for a senior Chief Information Security Officer (CISO) to strengthen information security governance within our organization.

In a context of increasing digitization of public services and the application of new regulations, notably NIS2, the CISO will be responsible for structuring, steering, and evolving the organization's cybersecurity and operational resilience strategy.

Tasks

• Define, update, and manage (program management) the cybersecurity and risk management strategy for the public entity, in alignment with its digital strategy and public service missions.
  The adopted framework is Cyfun, from the Centre for Cybersecurity Belgium.
• Conduct or supervise analyses of the organizational governance posture, identify priorities, and propose a structured compliance roadmap.
• Design, document, and maintain the Information Security Management System (ISMS: policies, procedures, internal standards, roles and responsibilities, indicators, and dashboards).
• Structure and lead crisis management (procedures, organization, simulation exercises), in connection with general management and internal/external stakeholders.
• Ensure regular reporting to management (dashboards, risk indicators, compliance status, progress of the roadmap).
• Supervise colleagues and product teams in the development of the platform.
• Serve as a bridge between business, IT, infrastructure, legal, compliance teams, and suppliers, in order to ensure a cross-functional and pragmatic approach to cybersecurity.
• Support teams in raising the maturity level of the organization.
• Collaborate with other social security institutions on best practices and at the implementation level (policies, IAP+, etc.).
• Ensure knowledge transfer to an internal CISO.

This is a part-time assignment.