ICT Security Officer

Our client is looking for an experienced ICT Security Officer who combines strong analytical capabilities with a collaborative mindset. In this role, you will contribute to the governance, assessment, and continuous improvement of the organization’s Information Security Management System (ISMS) across both office and operational technology (OT) environments. Key responsibilities include security governance and stakeholder management, analysis and continuous improvement, and security standards and compliance.

You will collaborate with ICT teams, business stakeholders, and operational departments to understand security needs and translate them into effective solutions, support the governance and continuous improvement of the ISMS, establish and document security processes, governance procedures, and best practices, analyze, document, and optimize security and business requirements in line with recognized industry standards, assess existing infrastructure, applications, and business systems to identify security risks and opportunities for improvement, conduct impact analyses and provide practical, future-oriented recommendations, and gather requirements and insights from application, infrastructure, operations, and business teams.

You will apply and promote security frameworks and standards such as NIST, CIS Controls, ISO 27001 / ISO 27002, and IEC 62443, support audit activities and compliance initiatives, and contribute to the enhancement of security policies, controls, and procedures.

Required experience: minimum 5 years of experience within ICT Security, Information Security, or Functional Analysis, demonstrated experience in security governance, risk assessment, and requirements analysis.

Technical expertise: strong understanding of information security frameworks and standards (NIST, CIS Controls, ISO 27001 / ISO 27002, IEC 62443), experience with ISO 27001 auditing activities is considered a strong asset, good understanding of both application and infrastructure architectures, ability to perform detailed root-cause investigations, diagnostics, and impact analyses, and strong analytical and problem-solving skills with the ability to translate business needs into security requirements.

Communication skills: excellent stakeholder management and communication skills, active listening and strong questioning techniques, ability to explain complex technical concepts in clear, business-friendly language, and comfort working with both technical and non-technical audiences.

Personal profile: self-driven, proactive, and able to work independently, strong team player with a collaborative approach, structured, detail-oriented, and methodical while remaining pragmatic, adaptable to changing business, regulatory, and organizational environments, and fluent in Dutch or French (spoken) and English (written).

Nice-to-have: experience within industrial, operational technology (OT), energy, utilities, or other critical infrastructure environments, background in security auditing or compliance management, and knowledge of cybersecurity governance within highly regulated environments.