A Belgian public sector organisation responsible for social security is running a NIS2 implementation programme to align governance, processes and security controls with the European Union's Network and Information Security Directive 2. The Business Project Manager coordinates Asset Management and Data & Platform Security projects within this security and compliance programme, using the CyFun framework to connect technical requirements with business processes, policies and procedures. The role combines IT project management, process analysis and stakeholder coordination across ICT security, data owners, process owners and management.
The mission
The NIS2 programme is structured around the CCB CyFun framework and is in its realisation phase, with measures implemented through projects grouped by CyFun function. Asset Management covers IDENTIFY (ID.AM), including governance of systems, people, assets, data and processes. Data & Platform Security covers PROTECT (PR.DS and PR.PS), protecting the confidentiality, integrity and availability of citizen data and social security systems. These projects provide an organisational basis for NIS2 compliance, governance and continuity of essential public services.
As Business Project Manager for NIS2 implementation, you support the NIS2 business lead and expert by assessing business impact, translating technical measures into organisational requirements, and aligning current and target processes. You coordinate workshops with ICT security, business stakeholders, data owners, process owners and the CISO function. Your IT project management scope covers plans, milestones, deliverables, steering groups, risk and dependency tracking, escalation, management reporting and audit material.
Your responsibilities
- Coordinate delivery of the Asset Management and Data & Platform Security projects by maintaining milestones, deliverables, dependencies and decisions.
- Translate NIS2 and CyFun requirements into organisational measures, documented business impacts and actionable follow-up for responsible teams.
- Map current and target processes for asset management, data security and platform security, and align policies, procedures and work instructions with technical controls.
- Facilitate workshops, steering groups and review sessions across ICT security, business stakeholders, data owners, process owners and the CISO function.
- Produce status reports, management material, project dossiers and audit evidence, while identifying risks, escalating blockers and supporting change communication.
Your profile
Essential skills
- Bring at least four years of experience in IT project management in a security context, covering plans, deliverables, risks and governance forums.
- Bring at least three years of experience in process analysis and design in regulated environments, including policy and procedure development.
- Demonstrate at least three years of stakeholder management in complex multi-actor environments and experience facilitating multidisciplinary working groups.
- Understand the CyFun framework and related frameworks such as ISO 27001, NIST CSF or CIS Controls.
- Evaluate policies and procedures against NIS2 and CyFun requirements, connecting technical controls with practical governance and work instructions.
- Write clear management reports and project documentation, and confidently flag risks or escalate decisions.
Education
- Bachelor's or master's degree in computer science, business administration, public administration, or equivalent relevant experience.