About this role
We are an essential entity under the NIS2 Directive (as transposed in Belgium) and are building our compliance posture via the ISO/IEC 27001 framework. We are looking for a structured and assertive coordinator to join the Information Security team and keep our NIS2 / ISO 27001 compliance program on track.
You will be the operational backbone of the program: tracking policy implementation, collecting and managing evidence, maintaining reporting dashboards, and running the practical side of project governance.
Key responsibilities
Compliance tracking and reportingBuild and maintain Excel dashboards and PowerPoint progress reports on NIS2 / ISO 27001 compliance for the management and steering committeesConsolidate status information, highlight gaps, delays and risks, and keep the data accurate and up to dateOwner engagement and evidence managementCollaborate with the owners responsible for implementing policies and controls across the organizationFollow up with these owners, assertively and constructively, to obtain status updates and deliverables within agreed deadlinesCollect, review for completeness, and organise evidence supporting control implementationMaintain a structured, audit-ready evidence repository with clear naming, versioning and traceabilityProject governance and coordinationOrganise and coordinate governance meetings (steering committees, working groups, follow-up meetings), including agendas, minutes, action logs and follow-upsHandle the administrative and practical aspects of project governanceEscalate blockers and overdue actions to the CISO in a timely mannerAudit planningPlan and coordinate the agendas for internal and external audits (ISO 27001 certification, surveillance audits, NIS2-related assessments)Schedule auditees and interviews, and make sure documentation and evidence are ready beforehandTrack audit findings and follow up on corrective actions with the relevant owners RequiredBachelor's degree or higher (information management, business administration, IT, law, or a related field)Working knowledge of information security governance and a good understanding of ISO/IEC 27001 (certification not required)Highly structured, organized and detail-oriented, with a strong sense of follow-upAssertive and credible communicator, comfortable chasing stakeholders at all levelsAdvanced Excel skills (formulas, pivot tables, dashboards) and strong PowerPoint skills for clear management reportingStrong written and spoken English and French; Dutch is a clear asset in the Belgian contextFirst experience (1–3 years) in compliance, GRC, audit support, PMO/PSO or a similar roleNice to haveFamiliarity with NIS2 and the Belgian framework (national law, Centre for Cybersecurity Belgium, CyFun)Knowledge of other frameworks (ISO 27002, NIST, CIS) or GRC toolsFoundation-level certification (e.g. ISO 27001 Foundation)Soft skillsRigor, autonomy and reliabilityDiplomacy combined with the ability to hold people to their commitmentsGood sense of priorities and deadlinesDiscretion when handling sensitive information All our positions are open to both women and men and are, of course, open to people with disabilities.