Job Location: Brussels

DATA GOVERNANCE SPECIALIST

Senior Data Governance / Data Management / Cybersecurity

Location: Brussels, Belgium
Project environment: Public / Critical Infrastructure / Transport
Seniority: Senior / Expert
Experience: 7+ years
Languages: French and/or Dutch – English is an advantage

NANO IT CyberSecurity is currently selecting an experienced Data Governance Specialist for a strategic European project involving a major organisation operating within a critical and highly regulated environment.

The assignment sits at the intersection of Data Governance, Cybersecurity, Risk Management, Regulatory Compliance and Data Management.

The objective is to strengthen the organisation’s ability to identify, classify, protect, govern and effectively use its critical data while supporting the implementation of a pragmatic and sustainable Data Governance framework.

The role has a strong connection with NIS2 requirements, data protection, information security and the broader Data Strategy.

THE MISSION

The Data Governance Specialist will play a central role in defining, implementing and maintaining the organisation’s Data Governance framework.

The position requires close collaboration with stakeholders across:

  • Cybersecurity / CISO
  • Data Protection / DPO
  • Enterprise Architecture
  • Data & Analytics
  • IT and Data Management
  • Business stakeholders
  • Document & Information Management
  • Risk and Compliance

The primary focus will be on establishing effective governance and protection mechanisms for critical and sensitive data, while progressively embedding Data Governance principles into business and Data initiatives.

KEY RESPONSIBILITIES

1. Data Governance & Critical Data Identification

You will contribute to the identification and governance of the organisation’s most critical data assets.

Responsibilities include:

  • Inventory and mapping of critical data.
  • Identification of data owners, custodians and responsible stakeholders.
  • Classification of data according to business criticality, sensitivity and regulatory requirements.
  • Mapping of data flows, dependencies and relationships.
  • Identification of critical data processing activities.
  • Definition and maintenance of Data Governance policies, standards and procedures.
  • Establishment of governance principles applicable across business and IT environments.
  • Supporting the definition of data ownership and accountability.

2. Data Protection & Security

You will work closely with cybersecurity and information security stakeholders to ensure that appropriate protection mechanisms are defined for critical data.

Responsibilities include:

  • Defining data protection requirements based on data classification.
  • Supporting the implementation of appropriate security controls.
  • Contributing to backup, recovery and resilience requirements.
  • Supporting the identification of risks associated with critical data.
  • Ensuring that data protection requirements are integrated into relevant projects and processes.
  • Supporting alignment between Data Governance and Cybersecurity requirements.
  • Contributing to regulatory compliance, particularly in relation to NIS2 and applicable data protection requirements.

3. Data Access Management

The role also covers governance of access to critical and sensitive information.

You will contribute to:

  • Defining data access principles according to business requirements.
  • Applying the least-privilege principle.
  • Supporting access governance and accountability.
  • Reviewing access rights to critical data.
  • Defining rules for appropriate access, use and sharing of data.
  • Working with IT and security teams to ensure that access controls are aligned with data classification.
  • Supporting periodic access reviews and governance processes.

4. Data Governance Adoption & Change Management

Data Governance is not only a framework or set of policies. The successful candidate will be expected to support its adoption throughout the organisation.

Responsibilities include:

  • Raising awareness of data governance principles.
  • Supporting training and communication activities.
  • Helping business teams understand their responsibilities regarding data.
  • Promoting good practices around data ownership, quality and protection.
  • Supporting organisational change and adoption.
  • Explaining complex governance concepts in clear and practical terms.
  • Building relationships with stakeholders across different business and technical communities.

DATA STRATEGY & DATA MANAGEMENT

A second important dimension of the role is to ensure that Data Governance becomes an integral part of the organisation’s Data Strategy.

Working with Business, Data & Analytics and IT teams, you will contribute to embedding governance principles into current and future Data initiatives.

This includes:

  • Improving data quality and consistency.
  • Increasing data discoverability and accessibility.
  • Improving data documentation.
  • Supporting metadata management.
  • Establishing and maintaining governance roles and responsibilities.
  • Supporting Master Data Management (MDM) initiatives.
  • Contributing to Data Lineage and traceability.
  • Supporting data modelling activities.
  • Contributing to data architecture and governance standards.
  • Ensuring governance requirements are considered within the Data roadmap.
  • Supporting the selection, implementation and adoption of Data Governance tools.

REQUIRED PROFILE

We are looking for a senior professional with a strong combination of Data Governance, Data Management, stakeholder management and organisational change capabilities.

The ideal candidate should have:

  • 7+ years of professional experience in Data Governance and/or Data Management.
  • Strong knowledge of Data Governance principles and frameworks.
  • Good understanding of DAMA-DMBOK or equivalent governance frameworks.
  • Proven experience defining governance models, policies, processes and responsibilities.
  • Strong experience in data quality and data management.
  • Experience with metadata management and Data Governance platforms.
  • Practical knowledge of tools such as Collibra, Informatica, OvalEdge or equivalent solutions.
  • Good understanding of Data Management methodologies and technologies.
  • Strong documentation and presentation skills.
  • Excellent stakeholder management capabilities.
  • Ability to work across business and technical environments.
  • Strong negotiation and influencing skills.
  • Ability to create and maintain an effective internal stakeholder network.
  • Strong communication skills, with the ability to explain complex subjects in simple and understandable terms.
  • Experience in change management and organisational adoption.
  • Ability to work autonomously and take ownership of initiatives.
  • Strong leadership capabilities and the ability to drive governance initiatives from definition through implementation.

NICE TO HAVE

The following experience would be considered a significant advantage:

  • Knowledge of NIS2 and European cybersecurity requirements.
  • Knowledge of ISO/IEC 38505 related to data governance.
  • Knowledge of ISO 8000 and data quality.
  • Good understanding of GDPR and data protection principles.
  • Experience with UML data modelling.
  • Knowledge of ArchiMate and data-flow modelling.
  • Experience within regulated or critical sectors such as:
    • Public sector
    • Transport
    • Financial services
    • Healthcare
    • Energy
    • Critical infrastructure
  • Previous experience working with CISO, DPO, Enterprise Architecture and Data Management functions.

KEY COMPETENCIES

Data Governance: Expert
Data Management: Expert
Stakeholder Management: Expert
Communication: Expert
Roadmap Management: Expert
Change Management: Advanced
Presentation: Advanced
Cybersecurity: Intermediate

LANGUAGES

French and/or Dutch: Native or bilingual proficiency
English: Professional working proficiency

WHY THIS PROJECT?

This is an opportunity to join a strategic Data Governance and Cybersecurity transformation programme where Data Governance is directly connected to:

Data → Risk → Security → Compliance → Business Resilience

The successful candidate will have the opportunity to work with senior stakeholders and contribute to the creation of a governance model designed to improve both the protection and business value of data.

The role offers a strong combination of Data Governance, Cybersecurity, NIS2, Data Management, Architecture, Risk and Change Management.

ELIGIBILITY

Opportunities are primarily intended for EU/EEA/Swiss citizens or candidates who already have the legal right to work in the relevant European country.

Candidates should indicate their current country of residence, work authorisation status, availability and preferred type of collaboration when applying.

HOW TO APPLY

NANO IT CyberSecurity is currently building its selection pipeline for this and other European projects.

If your profile matches this opportunity, please send:

  • Updated CV or LinkedIn profile
  • Current location
  • Work authorisation / eligibility
  • Availability
  • Daily rate or expected remuneration, if applicable
  • Preferred collaboration model
  • Relevant experience with Data Governance, NIS2, ISO 27001, GDPR, GRC or Cybersecurity

NANO IT CyberSecurity
People | Expertise | Trust | A Safer Tomorrow

Selection coordinated by Alma MUSHI – Associate Partner, for NANO IT CyberSecurity.

#DataGovernance #DataManagement #Cybersecurity #NIS2 #GRC #CyberRisk #ISO27001 #GDPR #DataQuality #DataArchitecture #MDM #DataLineage #CISO #DPO #ITGovernance #Brussels #Belgium #EuropeanProjects #CyberSecurityJobs

SECURITY PROJECT MANAGER – CYBERSECURITY / NIS2

Nous recherchons un Security Project Manager expérimenté pour accompagner un programme majeur de transformation Cybersecurity et Information Security au sein d’une organisation de grande taille en Belgique.

L’objectif est de piloter plusieurs initiatives de sécurité et de contribuer à la mise en conformité avec les exigences réglementaires et les standards de cybersécurité, notamment NIS2, ISO 27001 et NIST.

Vos responsabilités

• Piloter des projets Cybersecurity de bout en bout : planning, budget, qualité, risques et dépendances.
• Construire et maintenir les plans projet, WBS, KPI et tableaux de bord.
• Coordonner les équipes Security, IT Infrastructure, Architecture, Operations, Risk, Compliance et Business.
• Piloter la transition des solutions de sécurité vers les équipes opérationnelles : processus, support, procédures et gouvernance.
• Assurer la collecte, la qualité et la traçabilité des evidences nécessaires à l’audit, à la conformité et au reporting.
• Organiser le change management et accompagner l’adoption des nouvelles solutions et processus.
• Identifier les risques, dépendances, blocages et plans de mitigation.
• Assurer un reporting clair auprès du management et des parties prenantes.
• Jouer un rôle de leadership, de coordination, de conseil et de facilitation auprès des équipes.

Profil recherché

Expérience :
• Minimum 8 ans d’expérience en gestion de projets IT, idéalement dans des environnements complexes ou réglementés.
• Expérience significative en Security Project Management.
• Expérience dans plusieurs domaines de la cybersécurité, par exemple :

  • Network Security
  • Endpoint Security
  • IAM / PIM / PAM
  • SIEM / Central Logging
  • DLP
  • Disaster Recovery / Business Continuity
  • Threat Modeling
  • Database Security / Anonymisation
  • Secure Development

Frameworks & Compliance :
• Expérience avec NIS2, ISO 27001, NIST ou frameworks similaires.
• Connaissance de PRINCE2 ou d’un autre framework de gestion de projet.
• Une certification en gestion de projet ou cybersécurité constitue un avantage.

Leadership & communication

Nous recherchons une personne capable de travailler à la fois avec des experts techniques et avec le management.

Vous êtes structuré, pragmatique et orienté résultats. Vous savez simplifier des sujets techniques complexes, visualiser les dépendances et présenter clairement les risques, décisions et priorités.

Une expérience en coordination d’équipes, coaching et stakeholder management est fortement appréciée.

Langues

🇫🇷 Français ou 🇳🇱 Néerlandais courant, avec une bonne compréhension de l’autre langue nationale.

Localisation

📍 Bruxelles – Belgique
Possibilité de télétravail partiel selon les modalités du projet.

Processus de sélection

Les candidatures seront évaluées sur la base de l’expérience en Security Project Management, Cybersecurity, gouvernance, conformité et gestion de programmes complexes.

Les profils présélectionnés seront invités à un entretien permettant d’évaluer les compétences techniques, méthodologiques, organisationnelles et linguistiques.

Vous êtes Security Project Manager, Cybersecurity Program Manager, IT Project Manager avec une forte expérience Security, ou consultant spécialisé NIS2 / ISO 27001 ?

Envoyez-moi votre CV et votre profil LinkedIn

Confidentialité des candidatures garantie.

Alma MUSHI

Associate Partner

processing@nanoit.be 

#Cybersecurity #SecurityProjectManager #NIS2 #ISO27001 #InformationSecurity #CyberSecurity #ITProjectManager #GRC #RiskManagement #IAM #PAM #SIEM #Belgium #Brussels

IT and Cyber Control & Compliance officer
Function  description Develop, Implement and Maintain ICT Controls (with a particular focus on ICT Controls in Payments domain)
As an IT and Cyber Control and Compliance Officer you will carry on the activities listed below:

  • Understand the payment engine flow and the IT assets involved;
  • Assist in identifying and designing of controls;
  • Coordinate and monitor the execution of the first-line controls;
  • Assure the quality of the provided evidence;
  • Test the effectiveness of controls and provide advice on the improvement of existing ICT controls.
  • Report to management, to stakeholders (including the Internal Audit) the results of first-line controls;
  • Follow-up the status of remediation actions related to these controls;

Contribute to creating/ update procedures and or standards:

  • Identify impacted assets and processes upon policy & control changes;
  • Allocate the implementation roles and responsibilities for each security requirement;
  • Get implementers’ acceptance on the roles and responsibilities allocated to them.
Language requirements Dutch Good speaking and writing (optional)
French Fluent speaking and writing (mandatory)
English Fluent speaking and writing (mandatory)
Education Master degree in IT or science or an engineering degree, with a strong IT background or proven equivalent experience / skills in the area.
Certification (Preferable) Certifications in ISO27k series, Information Systems Security Professional CISSP, CISA…
Required experience / knowledge 2-5 years of experience in Information Security and in IT process management.
Technical experience mandatory
  • 2-5 year experience in IT and security technology and processes
  • Experience in Metrics definition and dashboarding;
  • Good knowledge of Excel (pivot tables, formulas) and Word, PPT;
  • Knowledge of SharePoint (as a user)
  • 2 years’ experience in designing and implementing IT generic controls (good knowledge of Identity & Access Management);
  • Skills in coordination of / collaboration with different teams and external resources.
  • Experienced with regulatory requirements, ISO/IEC standards (eg: 27001 Information Security Management Standard,…), laws and regulations (CHAPS, CIS);
preferable
  • Experience in developing and implementing policies and / or processes in IT area;
  • Certified ISO27001 Lead Implementer;
  • Knowledge of NIST control framework, PCI Standard, CIS20, SIG;
  • Knowledge of GRC Tools such as RSA Archer;
  • Project Management/coordination skills
  • Knowledge of Agile Methodology
Business experience mandatory
  • 2-5 years’ experience in IT and Information Security environments;
  • Capability to quickly understand end-to-end process flows and control needs;
  • Experience in Reports and Memo drafting, and reports ad presentations addressed to senior management.
preferable
  • Preference will be given to candidate that have a good knowledge / practical experience of different bank entities / processes if possible.
Soft skills
  •  Quick self-starter, pro-active attitude; team player;
  •   Highly productive and able to deliver within agreed deadlines
  •   Excellent English writing skills;
  •   Strong analytical skills and detail oriented.
  •   Ability to produce structured and concise documents;
  •   Ability to work in a dynamic and multi-cultural environment;
  •   Able to manage and prioritize tasks running in parallel.
error: Content is protected !!