Freelance klantspecifiek THRIX

How do you ensure that care and welfare remains digitally safe, reliable, and resilient today and tomorrow?

In a context where cyber threats are increasing and digital service delivery is crucial, thoughtful cybersecurity makes the difference. At the client, we actively focus on secure systems, reliable data, and robust processes that protect our organization and services.

That's why we are looking for a Cybersecurity Expert. Someone who helps shape our information security and concretely contributes to its further development. You will contribute to a strong Information Security Management System (ISMS), support our organization towards ISO 27001 certification, and ensure compliance with NIS2 requirements.

You will report directly to the IT Director and work closely with the DPO. You are the key contact person for information security. You will collaborate closely with colleagues in IT, external security partners, and process owners throughout the organization. Thanks to your expertise, pragmatic approach, and strong collaboration, we are gradually growing towards a higher level of cyber resilience.

You are also joining at a crucial moment. The client is making significant investments in cybersecurity in the coming years, with an ongoing NIS2 program, an approved budget, strong external partners, and aiming for ISO 27001 certification by spring 2027. You will have the opportunity to help lay the foundations for a future-proof and mature security operation.

WHAT WILL YOU DO

As a Cybersecurity Expert, you will play a central role in the further development, implementation, and monitoring of cybersecurity and information security. You will ensure that risks are managed, security requirements are met, and the organization continues to mature.

This includes, among other things, that you:

• manage and further develop the Information Security Management System (ISMS), including policies, processes, procedures, documentation, and review cycles, and contribute to the path towards ISO 27001 certification

• identify, analyze, and monitor cybersecurity risks, manage the risk register, and periodically report to relevant bodies

• ensure compliance with relevant standards and regulations, including ISO 27001, NIS2, and CyberFundamentals (CyFun), and prepare and support audits

• manage the Statement of Applicability and audit documentation and ensure that i-mens remains audit-ready

• maintain the Incident Response Plan, coordinate security incidents, and ensure proper follow-up of reporting obligations and improvement actions

• contribute to business continuity and disaster recovery initiatives, with particular attention to their security aspects

• assess supplier and supply chain risks and ensure compliance with security requirements for critical partners

• manage external security partners and monitor activities such as vulnerability management, patch management, monitoring, and identity & access management

• strengthen security awareness within i-mens through awareness, training, and awareness campaigns

• support management and executives with clear reporting on KPIs, risks, incidents, and the progress of cybersecurity initiatives

PROFILE

We are looking for an experienced cybersecurity expert who thrives in a rapidly evolving organization. You combine strong technical expertise with a pragmatic approach and derive energy from building and embedding cybersecurity within a complex organizational context.

You recognize yourself in the following profile:

• You have a master's degree, preferably in an IT-related or business management field, or equivalent through relevant experience.

• You have at least five years of demonstrable experience in information security, cybersecurity, or ICT risk management.

• You have a thorough knowledge of information security frameworks and standards such as ISO 27001, NIS2, and CyberFundamentals (CyFun).

• You have experience in risk management, audits, compliance, and establishing or managing an ISMS.

• You understand the operation of modern IT environments, including infrastructure, cloud, identity, and security services.

• You have insight into security operations, vulnerability management, supplier management, and incident management.

• Certifications such as CISSP, CISM, ISO 27001 Lead Implementer, or ISO 27001 Lead Auditor are a strong asset.

• You are analytically strong, work in a structured manner, and can translate complex issues into achievable actions and advice.

• You know how to engage stakeholders at different levels and can easily switch between operational teams, management, and executives.

• Experience in the healthcare sector or with the protection of sensitive personal data is a plus.

• You communicate fluently in Dutch and have a good command of English
  
  PRACTICAL

• The work schedule can be in 4/5 or full-time, with at least 2 days in the office on fixed days Tuesday and Thursday.

Practical info

Start: asap

Regime: 4/5 or full-time, with 2 days in the office

Location: Zwijnaarde

Languages: NL + EN

Skills

• Audit Expertise - Level Advanced - 1 to 3 years ago

• Cyber Fundamentals - Level Advanced

• Incident Management - Level Advanced

• ISMS - Level Intermediate

• ISO27001 - Level Advanced

• NIS2 - Level Advanced

• Risk Management - Level Advanced

• Security Tooling - Level Intermediate