As part of its activities, our client is looking for an ISO 27001 Expert. This is a full-time assignment for a minimum of 1 year (with the possibility of renewal), starting as soon as possible.

Part of the assignment may, in consultation with the manager, involve teleworking, but a minimum presence of 2 days per week on the Gosselies site is mandatory. Additional days of on-site presence may be requested from the consultant, depending on the needs of the department (on an ad hoc basis). As the Gosselies site is not easily accessible by public transport, a driving license and a vehicle are required for travel.

Main tasks

• The I&O department acts as supplier and operational manager of our client's server, datacom and digital workplace infrastructure.
• Within this department, the mission consists of :
• Be the main contact for information security aspects, you will take the lead on the follow-up of ISO 27001 implementations and the creation of operational processes within the I&O department.
• Contribute to the drafting of security standards and translate them into security policies. As standards are the concrete rules to be applied to infrastructure management, this requires a thorough understanding of systems and network solutions, so as to be able to propose concrete solutions. We need to be able to measure the budgetary, human, technical and functional impact of proposed solutions.
• Conduct gap analyses between the rules defined in the standards and the existing situation. This requires a broad knowledge of IT technologies.

As part of the development of the ISO 27001 standards required to obtain certification by mid-2024:

• You will support the I&O department in implementing ISO 27001 standards.
• Participate in the modeling, design and implementation of security policy requirements drafted by the CISO and his team.
• Participate in network and infrastructure security optimization studies.
• Verify the suitability of implemented solutions in terms of performance, application accessibility, stability, etc;
• Review, draft, validate and update operational security documentation.
• On a daily basis, you will be the main point of contact for Cloud (Azure) and On-premises security.
• You will develop a dashboarding and reporting strategy in line with expressed needs, based on performance indicators (KPIs).
• Participation in steering meetings to present a regular status of IT security compliance.

Skills required

• ISO 27001 specialist with 5 years' recent experience
• I&O IT architecture skills required to collaborate on the implementation of ISO 27001 security controls
• Proven ITIL experience to integrate security layer into existing ITSM processes.
• Must have experience in creating dashboards and reporting KPI's (operational and managerial reporting).
• Knowledge of industrial equipment (OT) is an asset
• ISO 27001 LI / CISSP / TOGAF / CEH / SANS certification an asset
• Knowledge of the utilities sector: minimum 3 years' experience in a utilities company.

Soft skills

• Customer and solution oriented
• Good communicator
• Flexible, team player
• Ability to synthesize and communicate with both executive management and a technical team.