Information Security Governance Expert

Keystone Solutions is seeking an Information Security Governance Expert to join a consultancy mission at a client site. This role involves working closely with the Ministry of the Federation Wallonia-Brussels (MFWB) to enhance their information security function in alignment with NIS2 and the CyberFundamentals (CyFun) strategy approved by the Government.

• →Conduct the NIS2 maturity assessment and gap analysis on the 40 security artifacts of the Ministry.
• →Design the risk management framework: strategy, appetite, register, and treatment plans.
• →Lead the external attack surface management (EASM) initiative: discovery, prioritization, and remediation of exposures with Keystone Solutions.
• →Draft priority security policies and facilitate their adoption by management.
• →Support the General Administrations in integrating security controls, in collaboration with CEN, DQPS, DPO, and Keystone Solutions.
• →Produce indicators and decision-making documents for the Management Committee.

• Analyse d’impact métier (BIA) et continuité d’activité - Level: Confirmed - Most recent: 1 to 3 years ago
• Animation d’ateliers et de concertations avec des directions métier - Level: Confirmed - Most recent: 1 to 3 years ago
• Directives NIS et NIS2 (lois belges du 7 avril 2019 et du 26 avril 2024) : mise en œuvre - Level: Confirmed - Most recent: This year
• Évaluation de maturité et diagnostic d’écart (gap assessment) - Level: Confirmed - Most recent: 1 to 3 years ago
• Gestion de la surface d’attaque externe (EASM) et de l’exposition : découverte d’actifs, priorisation, suivi du traitement - Level: Confirmed - Most recent: This year
• ISO/IEC 27001 : système de management de la sécurité de l’information (SMSI) - Level: Confirmed - Most recent: 1 to 3 years ago
• ISO/IEC 27005 : analyse et gestion des risques de sécurité - Level: Confirmed - Most recent: 1 to 3 years ago
• Rédaction de politiques et de procédures de sécurité - Level: Confirmed - Most recent: 1 to 3 years ago
• Référentiels de contrôles de sécurité : CyberFundamentals (CyFun), ISO/IEC 27002, NIST CSF - Level: Confirmed - Most recent: This year
• Registre des risques, plans de traitement et appétence au risque - Level: Confirmed - Most recent: 1 to 3 years ago

French
Level Native