We're looking for an Asset Management Expert in Cybersecurity to assess how IT, cloud, OT and information assets are inventoried, classified and managed. The work focuses on risks from unmanaged, outdated or unpatched assets and benchmarking against ISO 27001 Annex A, CyFun and NIST.
What you'll do
- Map current asset management across hardware, software, data, cloud and OT.
- Assess asset registers, CMDBs and discovery tools for coverage and accuracy.
- Interview infrastructure, application management and security stakeholders about current practices.
- Compare practices with ISO 27001 Annex A, CyFun and NIST.
- Prioritise risks linked to unmanaged, obsolete or unpatched assets.
- Present an improvement roadmap, brief security leaders and transfer knowledge.
What you bring
- Senior asset management expertise and the ability to advise under broad direction (SFIA level 5).
- Experience assessing asset management practices and asset registers.
- Knowledge of asset discovery, classification, ownership and lifecycle management for IT, cloud and OT assets.
- Ability to analyse risks linked to unmanaged, obsolete or unpatched assets.
- Working knowledge of ISO 27001 Annex A, CyFun and NIST SP 800-53.
- Knowledge of CMDB and asset discovery tools.
- Clear communication with management and technical stakeholders.
- Dutch or French (B2).
- English (B2).
- A Master's degree or equivalent relevant experience.
Nice to have
- ISO 27001 Lead Auditor or Lead Implementer, CISM or CDPSE certification.
What's next?
The people who do well here are the ones who saw themselves in this description. Not because they match every line, but because the mission felt right for them.
We are actively hiring for this position. Applications are reviewed by our team, and matching profiles receive a call to discuss the role in detail.
It takes under a minute to apply. Your email, your CV. That is all we need to start the conversation.