Bekijk alle vacaturesInformation Security Manager
Brussel, Brussel
Senior Information Security Manager
Start Date: 01/01/2026
End Date: 31/12/2026
Location: Brussels
Responsibilities:
- Develop and maintain the security strategy and governance framework.
- Create, update, and manage ISMS documentation, including the ISMS Manual, SoA, and other compliance documentation.
- Drive the full policy lifecycle: drafting, stakeholder review, legal review, publication, communication, and regular ISMS review cycles.
- Ensure compliance with ISO 27001:2022, NIS2, ISAE 3000 (Type 1/2), OPDE/MVS, and other relevant standards.
- Collaborate with suppliers to ensure security requirements are met.
- Ensure security design integration for the Configuration Management Database (CMDB).
- Oversee operational security processes, including access control, monitoring, and incident response.
- Contribute to SOC development and harmonize monitoring requirements.
- Manage vulnerability assessments and remediation plans.
- Develop continuity scenarios and support the creation, monitoring, and testing of BCM/DR plans.
- Ensure user training, awareness activities, and publication of materials.
- Prepare and ensure internal and external audits.
- Lead the corrective action and continuous improvement process following audit findings.
- Provide regular security posture reports to management and steering committees.
Requirements:
- Expertise in ISO 27001:2022, NIS2, ISAE 3000 audit models, and MVS OPDE and other security frameworks.
- 5+ years of experience in security management roles.
- Experience in multi-supplier ecosystems and documentation-heavy environments.
- Strong knowledge of cybersecurity risk management and audit processes.
- Experience in operational security, including access control and incident response.
- Familiarity with supplier security, ITSM process evaluation, and hosting/data-center security.
- Knowledge of vulnerability management and monitoring tools.
- Proficiency in SharePoint Online.
- Knowledge of energy sector ecosystem and operational structures (e.g., ENTSO-E, TSOs, RCCs, etc.).
- Fluent in English.