Senior Information Security & ISMS Manager (ISO 27001)
You will join the Digital Business Solutions department of a public utility organization responsible for supporting critical business processes through secure, reliable, and evolving information systems. Within the Information Security team, the focus is on strengthening governance, risk, and compliance practices while ensuring alignment between business needs, IT, and operational technology (OT) environments. Security is treated as a core enabler of the organization’s mission, with strong visibility at senior management level and strict regulatory and operational constraints.
Role Description
As a Senior Information Security & ISMS Manager, you take a leading role in managing and continuously improving the Information Security Management System (ISMS) in line with ISO 27001.
You ensure that security governance, processes, and controls are effectively implemented across IT, applications, infrastructure, and OT environments.
You coordinate closely with the CISO, program managers, business stakeholders, and technical teams to align security initiatives with organizational priorities.
You manage non-conformity processes, track remediation actions, and ensure timely closure of findings.
You prepare, consolidate, and present clear security reporting to senior management and C-level stakeholders.
You support and prepare ISMS management reviews, ensuring readiness, completeness, and compliance with ISO requirements.
You contribute to configuration management and security-related process design to strengthen operational maturity.
You proactively anticipate risks, deadlines, and dependencies, and take ownership to ensure timely delivery.
You operate autonomously while actively contributing as a team player within the broader security organization.
Qualifications
You hold a ISO 27001 Lead Implementer certification (mandatory).
You have at least 5 years of senior experience within a security team, with proven responsibility for ISMS management.
Knowledge of or experience with NIS2, DORA, or similar European cybersecurity regulations is a strong plus.
You have hands‑on experience with non‑conformity management processes and audit follow‑up.
You have solid experience across IT infrastructure, applications, and security governance.
You have proven experience aligning and coordinating with multiple stakeholders, including CISO, program managers, business, and technical teams.
You are comfortable reporting to senior management and C-level audiences, both written and verbally.
You have experience with configuration management and process design.
You have proven experience with security in OT environments .
You have successfully prepared and supported at least two complete ISMS management reviews .
You are fluent in English and fluent in French or Dutch, with passive knowledge of the other language.
Offer
Location: Brussels
Start date: 28 February 2026
End date: 22 February 2027
Contract type: Freelance or Permanent
#J-18808-Ljbffr