We are seeking a NIS2 Implementer to support a Belgian public organization in bringing its entire digital environment into compliance with the NIS2 directive, in alignment with the ISO 27001 framework, GDPR, and other European initiatives (DORA, AI Act, etc.). The context is that of a complex, multi-stakeholder organization, where the security of networks and information systems is critical and must be aligned with rapidly evolving regulatory requirements.

Tasks

• Conduct and document risk analyses and propose treatment plans aligned with NIS2 and Cyber Fundamentals
• Translate NIS2 regulatory requirements into policies, procedures, technical standards, and practical guides that are understandable by both strategic and operational teams.
• Establish and update the information security governance framework: roles and responsibilities, committees, reporting, compliance indicators.
• Contribute to the implementation of organizational and technical measures: incident management, logging and monitoring, access management, business continuity, response and communication plans in the event of a NIS2 incident.
• Draft and maintain mandatory documentation: security policies, procedures, registers, DPIA, improvement plans, and compliance reports intended for management and, where applicable, competent authorities.
• Organize awareness and training sessions (management, IT, business units) to explain the impacts of NIS2 and support cultural change.

This is a part-time assignment.