Our client is looking for an experienced ICT Security Officer who combines strong analytical capabilities with a collaborative mindset. In this role, you will contribute to the governance, assessment, and continuous improvement of the organization’s Information Security Management System (ISMS) across both office and operational technology (OT) environments.
Key Responsibilities
Security Governance & Stakeholder Management
- Collaborate with ICT teams, business stakeholders, and operational departments to understand security needs and translate them into effective solutions.
- Support the governance and continuous improvement of the Information Security Management System (ISMS).
- Establish and document security processes, governance procedures, and best practices to improve efficiency and collaboration.
Analysis & Continuous Improvement
- Analyze, document, and optimize security and business requirements in line with recognized industry standards.
- Assess existing infrastructure, applications, and business systems to identify security risks and opportunities for improvement.
- Conduct impact analyses and provide practical, future-oriented recommendations.
- Gather requirements and insights from application, infrastructure, operations, and business teams.
Security Standards & Compliance
- Apply and promote security frameworks and standards such as:
- NIST
- CIS Controls
- ISO 27001 / ISO 27002
- IEC 62443
- Support audit activities and compliance initiatives.
- Contribute to the enhancement of security policies, controls, and procedures.
Required Experience & Technical Skills
Experience
- Minimum 5 years of experience within ICT Security, Information Security, or Functional Analysis.
- Demonstrated experience in security governance, risk assessment, and requirements analysis.
Technical Expertise
- Strong understanding of information security frameworks and standards:
- NIST
- CIS Controls
- ISO 27001 / ISO 27002
- IEC 62443
- Experience with ISO 27001 auditing activities is considered a strong asset.
- Good understanding of both application and infrastructure architectures.
- Ability to perform detailed root-cause investigations, diagnostics, and impact analyses.
- Strong analytical and problem-solving skills with the ability to translate business needs into security requirements.
Communication Skills
- Excellent stakeholder management and communication skills.
- Active listening and strong questioning techniques.
- Ability to explain complex technical concepts in clear, business-friendly language.
- Comfortable working with both technical and non-technical audiences.
Personal Profile
- Self-driven, proactive, and able to work independently.
- Strong team player with a collaborative approach.
- Structured, detail-oriented, and methodical while remaining pragmatic.
- Adaptable to changing business, regulatory, and organizational environments.
- Fluent in Dutch or French (spoken) and English (written).
Nice-to-Have
- Experience within industrial, operational technology (OT), energy, utilities, or other critical infrastructure environments.
- Background in security auditing or compliance management.
- Knowledge of cybersecurity governance within highly regulated environments.