FreelanceCDI
The Role
You support end clients in structuring, achieving compliance with, and steering their cybersecurity program. You work on governance, risk analysis and regulatory compliance (NIS2, ISO 27001, DORA, GDPR), in close contact with IT and business leadership. You run maturity audits and gap analyses (ISO 27001, NIS2, CyFun, NIST). You conduct risk analyses (EBIOS RM, ISO 27005) and build treatment plans. You write and maintain security policies, procedures and frameworks (ISMS policy, BCP/DRP, incident management). You lead compliance programs and prepare ISO 27001 certifications. You assess and monitor third-party and supplier security (TPRM). You design security dashboards and KPIs for the executive committee and the CISO. You run awareness campaigns and crisis exercises. You contribute to pre-sales: scoping, estimation, methodology demos, tenders.
Must-have
3+ years in consulting or in a GRC / information security role
At least 2 complete compliance or certification engagements (ISO 27001, NIS2, or equivalent)
Strong command of frameworks: ISO 27001/27002, NIS2, NIST CSF, GDPR
Ability to engage with C-level stakeholders as well as technical teams
Excellent writing skills and documentation rigor
Nice-to-have
Certifications: ISO 27001 Lead Implementer or Lead Auditor, CISM, CISA, CISSP, CRISC
Knowledge of the Belgian framework: NIS2 transposition, CCB, CyFun
Experience in regulated sectors: finance (DORA), healthcare, energy, public sector
Technical awareness: IAM, cloud security, SOC, vulnerability management