Department/entity: CISO-office – Federal Police · domain Governance, Risk & Compliance (GRC)

Introduction

The Chief Information Security Officer (CISO) is responsible for the information security of the federal police, including the ISMS, risk management, compliance, and governance.

The Microsoft E5 Implementation & Security Program Manager supports the CISO within the CISO-office. The role coordinates the rollout of the acquired Microsoft full E5 license, closely monitors it from a security perspective, and detects risks, without taking over the execution role of the ICT services or the decision-making authority of the CISO.

Mission

The role ensures a thoughtful, secure, and manageable rollout of the Microsoft full E5 license. It coordinates the implementation towards IT, assists the CISO in follow-up, identifies risks, and builds the bridge to follow-up projects such as SecaaS.

Deliverables

• Supported roadmap and planning for the E5 rollout
• Periodic progress and risk reports
• Agreements on configuration, governance, and management of the E5 environment
• Acceptance and transfer files (project → management)
• Change and adoption approach; input for the SecaaS assignment

Main tasks

• Planning and coordinating the E5 rollout, monitoring progress and dependencies
• Technically liaising with the ICT services and closely following the rollout
• Detecting risks, bottlenecks, and challenges, and proposing control measures
• Monitoring configuration, identity and access management, and governance
• Collaborating with stakeholders, with the local police as the primary stakeholder
• Monitoring the supplier (Microsoft/resellers) and license usage
• Building the bridge to follow-up projects such as the SecaaS assignment
• Reporting to the CISO and documenting decisions and configurations

Knowledge domains

• Microsoft 365 / E5: core services and their interrelations (Exchange, Teams, SharePoint/OneDrive)
• Identity and access: Entra ID (Azure AD), conditional access, MFA; Intune (AD/ADFS/SCCM is a plus)
• Security and compliance workloads of E5; cloud, hybrid, and mobile solutions
• Information security and GRC; overview of NIS 2 and the GDPR
• Project and program coordination and license management

Communication and collaboration

• Communicate clearly and switch between technical and non-technical language
• Collaborate with the CISO, the ICT services, the local police, and the supplier
• Dutch or French required; bilingualism is an asset; English required

Level and experience

• Independently coordinate within a clear framework (SFIA level 4 – Enable)
• Experienced in the cybersecurity domain; affinity with the federal police context

Diploma

Bachelor or master (e.g. computer science/information systems), or equivalent through experience. Microsoft certifications are an asset

In practice

• Status: external
• Level of responsibility: SFIA level 4 – Enable
• Work regime: Full-time
• Location: Brussels
• Working conditions: Combination of office and remote work according to service agreements
• Team: CISO-office, in close collaboration with the ICT services (DRI)