Information Security Consultant
Join a transformative compliance journey where information security becomes a strategic advantage rather than a checkbox. You will design, harmonize, and embed NIS2-ready policies that protect critical operations and satisfy demanding auditors.
CONTEXT
Our client, a major player in its sector, is navigating a regulatory sea change as NIS2 reshapes the cybersecurity obligations of essential and important entities. The organization has strong operational foundations, but its security policies have grown organically across departments, creating inconsistencies, blind spots, and audit anxiety. Leadership has decided to turn this challenge into an opportunity: build a coherent, risk-based information security framework that can withstand scrutiny, empower teams, and protect the trust of customers and partners. The consultant will act as the lighthouse keeper for this journey, guiding stakeholders from fragmented practices to a unified compliance posture.
ACTIVITIES
- Assess the current security policy landscape, identifying gaps against NIS2 requirements and industry good practices.
- Develop, harmonize, and implement information security policies, procedures, and technical or organizational measures.
- Translate regulatory language into practical controls that business and technical teams can actually adopt.
- Prepare the organization for audits and inspections, including evidence collection, control testing, and remediation plans.
- Facilitate workshops and interviews with process owners, IT teams, legal, risk, and executive sponsors.
- Report progress, risks, and recommendations to steering committees and senior stakeholders.
- Support incident response and business continuity alignment where NIS2 obligations intersect.
EXPECTED ACHIEVEMENTS
- A complete, approved NIS2 compliance roadmap with clear ownership and measurable milestones.
- A harmonized policy framework that reduces duplication, closes critical gaps, and improves audit readiness.
- Demonstrable evidence that technical and organizational measures are implemented and effective.
- Increased security awareness and accountability across business lines.
- Confident stakeholder reporting that positions security as an enabler of resilience and growth.
ENVIRONMENT
- Regulatory frameworks: NIS2, ISO 27001, ISO 27002, NIST Cybersecurity Framework.
- Governance, risk, and compliance tools for policy management, risk registers, and evidence tracking.
- Collaborative tools for workshops, documentation, and stakeholder communication.
- A hybrid or remote-friendly setup with regular interaction across European entities.
- Methodologies: risk-based planning, gap analysis, control mapping, and continuous improvement.