Information Security Governance Expert

Closes on 13/11/2026BrusselsHybrid, 20% on siteStarts on 01/12/2026
Remuneration: 4.000 - 5.100 EUR/mo gross ·Freelance also possible

Apply for this role

or apply with email & CV

Drag & drop your CV here, or click to browse

PDF, DOC, DOCX, or TXT (max 4MB)

By applying, you agree to our Terms of Service and Privacy Policy.

Job description

We are looking for an Information Security Governance Expert to help build an information security function and advance its NIS2 and CyberFundamentals roadmap. Working alongside the CISO, you will turn assessments into a practical risk management approach and support business management in adopting security controls.

Your role

  • Assess NIS2 maturity and identify gaps across security artefacts.
  • Design the risk management approach, including risk appetite, the risk register and treatment plans.
  • Lead external attack surface management, from discovering exposed assets to prioritising and tracking treatment.
  • Draft priority security policies and support their adoption by management.
  • Help business teams integrate security controls, working with security and data protection stakeholders.
  • Prepare indicators and decision papers for management.

You have

  • At least five years of business impact analysis experience, used within the past three years.
  • At least five years of business continuity experience, used within the past three years.
  • At least five years of experience facilitating workshops and consultations with business management, including within the past three years.
  • At least five years of experience implementing NIS, including use within the past 12 months.
  • At least five years of experience implementing NIS2, including use within the past 12 months.
  • At least five years of experience in security maturity assessment, including within the past three years.
  • At least five years of experience in security gap assessment, including within the past three years.
  • At least five years of EASM experience, including asset discovery, prioritisation and treatment follow-up, and use within the past 12 months.
  • At least five years of experience with ISO/IEC 27001 information security management systems, including within the past three years.
  • At least five years of experience with ISO/IEC 27005 security risk analysis and management, including within the past three years.
  • At least five years of experience drafting security policies, including within the past three years.
  • At least five years of experience drafting security procedures, including within the past three years.
  • At least five years of experience with CyberFundamentals (CyFun), including use within the past 12 months.
  • At least five years of experience with ISO/IEC 27002, including use within the past 12 months.
  • At least five years of experience with the NIST Cybersecurity Framework, including use within the past 12 months.
  • At least five years of experience with risk registers, including within the past three years.
  • At least five years of experience with risk treatment plans, including within the past three years.
  • At least five years of experience with risk appetite, including within the past three years.
  • French at C2 level.

A plus

  • At least five years of experience as a risk management expert, including within the past 12 months.
  • At least five years of professional experience in information security governance or security risk management.
  • Experience leading a security maturity assessment or security gap assessment.
  • CISM, CISA, CISSP, ISO 27001 Lead Implementer or Lead Auditor, or ISO 27005 Risk Manager certification.
  • Ability to prepare work independently and present its results.
  • A structured approach to advancing security initiatives.

Working at Neurho

Founded in 1998, Neurho is a Belgian IT and business consultancy. For more than 25 years, we have been helping banks, insurers, energy companies and public institutions in Belgium and Luxembourg with their transformation projects. At Neurho, you work on varied and challenging assignments, where your expertise is recognised and your growth encouraged. On top of your salary, you enjoy many extra-legal benefits, designed to suit your role, your needs and your personal wishes.

Neurho is committed to equal opportunity and welcomes every application, regardless of age, origin, nationality, gender, social background, beliefs or disability.