Information Security Analyst – NIS2 & Compliance

Our client, a prominent organization in the environmental utility and infrastructure sector, is seeking a specialist to support the implementation of the NIS2 framework. The role focuses on second-line validation of security evidence and documentation to ensure organizational readiness for external audits.

Responsibilities: Assess the quality of documentation and implementation evidence provided by internal domains based on security guidance. Validate that provided evidence supports self-evaluation scores and is not based on assumptions. Provide structured feedback and concrete improvement points to domain owners. Build comprehensive audit dossiers and evidence registers for external verification. Interpret technical evidence including configuration exports, log files, tickets, and scan reports.

Support the organization in achieving and maintaining required security maturity levels.

Requirements: You have 3+ years of experience in information security, compliance, or IT audit. You possess deep knowledge of security frameworks such as CyFun, ISO 27001, or NIST CSF. You bring experience in a second-line security role focusing on validation and oversight. You're able to analyze technical data like logs, vulnerability scans, and system configurations. You are native in Dutch.

Nice to Haves: Experience with CyFun implementations specifically for essential organizations. Knowledge of English.

Offer: Start date: ASAP.

Duration: 15 months (until 31/12/2027).

Work regime: Part-time (3/5).

Location: Aartselaar.

Working model: Hybrid.

Contract: open to both permanent employees and freelancers.