Cybersecurity Expert

CONTEXT

Our client, a major player in its sector, is an independent care organization that touches thousands of lives every day. Behind every care path, there is a complex digital ecosystem of patient records, scheduling platforms, communication tools, and sensitive data flows. As regulatory pressure rises with NIS2 and the need for ISO 27001 certification becomes non-negotiable, the organization has decided to elevate information security from a compliance exercise to a strategic foundation. The ICT Director and DPO are looking for a hands-on expert who can turn ambition into an operational, auditable, and resilient security framework. This is not a role about ticking boxes; it is about building trust, protecting vulnerable people, and future-proofing an essential service.

ACTIVITIES

• Design, implement, and continuously improve the Information Security Management System, ensuring it is practical, documented, and aligned with business reality.
• Lead the organization toward ISO 27001 certification, including gap analysis, risk treatment plans, internal audits, and preparation for external audits.
• Translate NIS2 requirements into concrete policies, controls, and reporting mechanisms across technical and operational teams.
• Manage cybersecurity and information security risks: identify, assess, prioritize, and track remediation with clear ownership.
• Oversee compliance with GDPR and other relevant regulations in close collaboration with the DPO.
• Build and run incident response playbooks, coordinate response efforts, and lead post-incident reviews.
• Strengthen security awareness through training, phishing simulations, and practical communication for non-technical staff.
• Evaluate third-party vendors and partners, ensuring security requirements are embedded in contracts and onboarding processes.
• Report to leadership with meaningful metrics, dashboards, and recommendations that support decision-making.

EXPECTED ACHIEVEMENTS

• Achieve ISO 27001 certification within the agreed roadmap, with an ISMS that survives real-world audits and daily use.
• Establish a clear, defensible NIS2 compliance posture, including governance, incident reporting, and supply-chain security.
• Reduce the organization's exposure to cyber risk by closing critical gaps and embedding risk management into change processes.
• Create a repeatable incident response capability that minimizes impact and builds confidence across care teams.
• Raise security awareness so that every employee becomes a proactive line of defense.
• Provide leadership with visibility and assurance that security investments are targeted, measurable, and effective.

ENVIRONMENT

• Frameworks and standards: ISO 27001, NIS2, GDPR, ISMS, risk management, business continuity.
• Security tooling: SIEM, vulnerability management, endpoint protection, identity and access management, Microsoft 365 security, Entra ID, GRC platforms.
• Methodologies: risk-based security, continuous improvement, agile collaboration, ITIL-aligned incident management.
• Stakeholders: ICT Director, DPO, operational care teams, external auditors, and technology partners.
• Culture: mission-driven, human-centered, pragmatic, and committed to protecting sensitive care data.