Senior Data Governance / Data Management / Cybersecurity

Location: Brussels, Belgium Project environment: Public / Critical Infrastructure / Transport Seniority: Senior / Expert Experience: 7+ years Languages: French and/or Dutch – English is an advantage NANO IT CyberSecurity is currently selecting an experienced Data Governance Specialist for a strategic European project involving a major organisation operating within a critical and highly regulated environment. The assignment sits at the intersection of Data Governance, Cybersecurity, Risk Management, Regulatory Compliance and Data Management. The objective is to strengthen the organisation's ability to identify, classify, protect, govern and effectively use its critical data while supporting the implementation of a pragmatic and sustainable Data Governance framework. The role has a strong connection with NIS2 requirements, data protection, information security and the broader Data Strategy.

THE MISSION

The Data Governance Specialist will play a central role in defining, implementing and maintaining the organisation's Data Governance framework. The position requires close collaboration with stakeholders across:

• Cybersecurity / CISO
• Data Protection / DPO
• Enterprise Architecture
• Data & Analytics
• IT and Data Management
• Business stakeholders
• Document & Information Management
• Risk and Compliance

The primary focus will be on establishing effective governance and protection mechanisms for critical and sensitive data, while progressively embedding Data Governance principles into business and Data initiatives.

KEY RESPONSIBILITIES

1. Data Governance & Critical Data Identification You will contribute to the identification and governance of the organisation's most critical data assets. Responsibilities include:

• Inventory and mapping of critical data.
• Identification of data owners, custodians and responsible stakeholders.
• Classification of data according to business criticality, sensitivity and regulatory requirements.
• Mapping of data flows, dependencies and relationships.
• Identification of critical data processing activities.
• Definition and maintenance of Data Governance policies, standards and procedures.
• Establishment of governance principles applicable across business and IT environments.
• Supporting the definition of data ownership and accountability.

2. Data Protection & Security You will work closely with cybersecurity and information security stakeholders to ensure that appropriate protection mechanisms are defined for critical data. Responsibilities include:

• Defining data protection requirements based on data classification.
• Supporting the implementation of appropriate security controls.
• Contributing to backup, recovery and resilience requirements.
• Supporting the identification of risks associated with critical data.
• Ensuring that data protection requirements are integrated into relevant projects and processes.
• Supporting alignment between Data Governance and Cybersecurity requirements.
• Contributing to regulatory compliance, particularly in relation to NIS2 and applicable data protection requirements.

3. Data Access Management The role also covers governance of access to critical and sensitive information. You will contribute to:

• Defining data access principles according to business requirements.
• Applying the least-privilege principle.
• Supporting access governance and accountability.
• Reviewing access rights to critical data.
• Defining rules for appropriate access, use and sharing of data.
• Working with IT and security teams to ensure that access controls are aligned with data classification.
• Supporting periodic access reviews and governance processes.

4. Data Governance Adoption & Change Management Data Governance is not only a framework or set of policies. The successful candidate will be expected to support its adoption throughout the organisation. Responsibilities include:

• Raising awareness of data governance principles.
• Supporting training and communication activities.
• Helping business teams understand their responsibilities regarding data.
• Promoting good practices around data ownership, quality and protection.
• Supporting organisational change and adoption.
• Explaining complex governance concepts in clear and practical terms.
• Building relationships with stakeholders across different business and technical communities.

DATA STRATEGY & DATA MANAGEMENT

A second important dimension of the role is to ensure that Data Governance becomes an integral part of the organisation's Data Strategy. Working with Business, Data & Analytics and IT teams, you will contribute to embedding governance principles into current and future Data initiatives. This includes:

• Improving data quality and consistency.
• Increasing data discoverability and accessibility.
• Improving data documentation.
• Supporting metadata management.
• Establishing and maintaining governance roles and responsibilities.
• Supporting Master Data Management (MDM) initiatives.
• Contributing to Data Lineage and traceability.
• Supporting data modelling activities.
• Contributing to data architecture and governance standards.
• Ensuring governance requirements are considered within the Data roadmap.
• Supporting the selection, implementation and adoption of Data Governance tools.

REQUIRED PROFILE

We are looking for a senior professional with a strong combination of Data Governance, Data Management, stakeholder management and organisational change capabilities. The ideal candidate should have:

• 7+ years of professional experience in Data Governance and/or Data Management.
• Strong knowledge of Data Governance principles and frameworks.
• Good understanding of DAMA-DMBOK or equivalent governance frameworks.
• Proven experience defining governance models, policies, processes and responsibilities.
• Strong experience in data quality and data management.
• Experience with metadata management and Data Governance platforms.
• Practical knowledge of tools such as Collibra, Informatica, OvalEdge or equivalent solutions.
• Good understanding of Data Management methodologies and technologies.
• Strong documentation and presentation skills.
• Excellent stakeholder management capabilities.
• Ability to work across business and technical environments.
• Strong negotiation and influencing skills.
• Ability to create and maintain an effective internal stakeholder network.
• Strong communication skills, with the ability to explain complex subjects in simple and understandable terms.
• Experience in change management and organisational adoption.
• Ability to work autonomously and take ownership of initiatives.
• Strong leadership capabilities and the ability to drive governance initiatives from definition through implementation.

NICE TO HAVE

The following experience would be considered a significant advantage:

• Knowledge of NIS2 and European cybersecurity requirements.
• Knowledge of ISO/IEC 38505 related to data governance.
• Knowledge of ISO 8000 and data quality.
• Good understanding of GDPR and data protection principles.
• Experience with UML data modelling.
• Knowledge of ArchiMate and data-flow modelling.
• Experience within regulated or critical sectors such as:
  • Public sector
  • Transport
  • Financial services
  • Healthcare
  • Energy
  • Critical infrastructure
• Previous experience working with CISO, DPO, Enterprise Architecture and Data Management functions.

KEY COMPETENCIES

Data Governance: Expert Data Management: Expert Stakeholder Management: Expert Communication: Expert Roadmap Management: Expert Change Management: Advanced Presentation: Advanced Cybersecurity: Intermediate

LANGUAGES

French and/or Dutch: Native or bilingual proficiency English: Professional working proficiency

WHY THIS PROJECT?

This is an opportunity to join a strategic Data Governance and Cybersecurity transformation programme where Data Governance is directly connected to: Data → Risk → Security → Compliance → Business Resilience The successful candidate will have the opportunity to work with senior stakeholders and contribute to the creation of a governance model designed to improve both the protection and business value of data. The role offers a strong combination of Data Governance, Cybersecurity, NIS2, Data Management, Architecture, Risk and Change Management.

ELIGIBILITY

Opportunities are primarily intended for EU/EEA/Swiss citizens or candidates who already have the legal right to work in the relevant European country. Candidates should indicate their current country of residence, work authorisation status, availability and preferred type of collaboration when applying.

HOW TO APPLY

NANO IT CyberSecurity is currently building its selection pipeline for this and other European projects. If your profile matches this opportunity, please send:

• Updated CV or LinkedIn profile
• Current location
• Work authorisation / eligibility
• Availability
• Daily rate or expected remuneration, if applicable
• Preferred collaboration model
• Relevant experience with Data Governance, NIS2, ISO 27001, GDPR, GRC or Cybersecurity

NANO IT CyberSecurity People | Expertise | Trust | A Safer Tomorrow Selection coordinated by Alma MUSHI – Associate Partner, for NANO IT CyberSecurity. #DataGovernance #DataManagement #Cybersecurity #NIS2 #GRC #CyberRisk #ISO27001 #GDPR #DataQuality #DataArchitecture #MDM #DataLineage #CISO #DPO #ITGovernance #Brussels #Belgium #EuropeanProjects #CyberSecurityJobs

Nous recherchons un Security Project Manager expérimenté pour accompagner un programme majeur de transformation Cybersecurity et Information Security au sein d’une organisation de grande taille en Belgique. L’objectif est de piloter plusieurs initiatives de sécurité et de contribuer à la mise en conformité avec les exigences réglementaires et les standards de cybersécurité, notamment NIS2, ISO 27001 et NIST.

Vos responsabilités

• Piloter des projets Cybersecurity de bout en bout : planning, budget, qualité, risques et dépendances. • Construire et maintenir les plans projet, WBS, KPI et tableaux de bord. • Coordonner les équipes Security, IT Infrastructure, Architecture, Operations, Risk, Compliance et Business. • Piloter la transition des solutions de sécurité vers les équipes opérationnelles : processus, support, procédures et gouvernance. • Assurer la collecte, la qualité et la traçabilité des evidences nécessaires à l’audit, à la conformité et au reporting. • Organiser le change management et accompagner l’adoption des nouvelles solutions et processus. • Identifier les risques, dépendances, blocages et plans de mitigation. • Assurer un reporting clair auprès du management et des parties prenantes. • Jouer un rôle de leadership, de coordination, de conseil et de facilitation auprès des équipes.

Profil recherché

Expérience : • Minimum 8 ans d’expérience en gestion de projets IT, idéalement dans des environnements complexes ou réglementés. • Expérience significative en Security Project Management. • Expérience dans plusieurs domaines de la cybersécurité, par exemple :

• Network Security
• Endpoint Security
• IAM / PIM / PAM
• SIEM / Central Logging
• DLP
• Disaster Recovery / Business Continuity
• Threat Modeling
• Database Security / Anonymisation
• Secure Development

Frameworks & Compliance : • Expérience avec NIS2, ISO 27001, NIST ou frameworks similaires. • Connaissance de PRINCE2 ou d’un autre framework de gestion de projet. • Une certification en gestion de projet ou cybersécurité constitue un avantage.

Leadership & communication

Nous recherchons une personne capable de travailler à la fois avec des experts techniques et avec le management. Vous êtes structuré, pragmatique et orienté résultats. Vous savez simplifier des sujets techniques complexes, visualiser les dépendances et présenter clairement les risques, décisions et priorités. Une expérience en coordination d’équipes, coaching et stakeholder management est fortement appréciée.

Langues

🇫🇷 Français ou 🇳🇱 Néerlandais courant, avec une bonne compréhension de l’autre langue nationale.

Localisation

📍 Bruxelles – Belgique Possibilité de télétravail partiel selon les modalités du projet.

Processus de sélection

Les candidatures seront évaluées sur la base de l’expérience en Security Project Management, Cybersecurity, gouvernance, conformité et gestion de programmes complexes. Les profils présélectionnés seront invités à un entretien permettant d’évaluer les compétences techniques, méthodologiques, organisationnelles et linguistiques. Vous êtes Security Project Manager, Cybersecurity Program Manager, IT Project Manager avec une forte expérience Security, ou consultant spécialisé NIS2 / ISO 27001 ? Envoyez-moi votre CV et votre profil LinkedIn Confidentialité des candidatures garantie. Alma MUSHI Associate Partner processing@nanoit.be  #Cybersecurity #SecurityProjectManager #NIS2 #ISO27001 #InformationSecurity #CyberSecurity #ITProjectManager #GRC #RiskManagement #IAM #PAM #SIEM #Belgium #Brussels

Function  description	Develop, Implement and Maintain ICT Controls (with a particular focus on ICT Controls in Payments domain) As an IT and Cyber Control and Compliance Officer you will carry on the activities listed below: Understand the payment engine flow and the IT assets involved; Assist in identifying and designing of controls; Coordinate and monitor the execution of the first-line controls; Assure the quality of the provided evidence; Test the effectiveness of controls and provide advice on the improvement of existing ICT controls. Report to management, to stakeholders (including the Internal Audit) the results of first-line controls; Follow-up the status of remediation actions related to these controls; Contribute to creating/ update procedures and or standards: Identify impacted assets and processes upon policy & control changes; Allocate the implementation roles and responsibilities for each security requirement; Get implementers’ acceptance on the roles and responsibilities allocated to them.
Language requirements	Dutch		Good speaking and writing (optional)
	French		Fluent speaking and writing (mandatory)
	English		Fluent speaking and writing (mandatory)
Education	Master degree in IT or science or an engineering degree, with a strong IT background or proven equivalent experience / skills in the area.
Certification	(Preferable) Certifications in ISO27k series, Information Systems Security Professional CISSP, CISA…
Required experience / knowledge	2-5 years of experience in Information Security and in IT process management.
	Technical experience	mandatory		2-5 year experience in IT and security technology and processes Experience in Metrics definition and dashboarding; Good knowledge of Excel (pivot tables, formulas) and Word, PPT; Knowledge of SharePoint (as a user) 2 years’ experience in designing and implementing IT generic controls (good knowledge of Identity & Access Management); Skills in coordination of / collaboration with different teams and external resources. Experienced with regulatory requirements, ISO/IEC standards (eg: 27001 Information Security Management Standard,…), laws and regulations (CHAPS, CIS);
		preferable		Experience in developing and implementing policies and / or processes in IT area; Certified ISO27001 Lead Implementer; Knowledge of NIST control framework, PCI Standard, CIS20, SIG; Knowledge of GRC Tools such as RSA Archer; Project Management/coordination skills Knowledge of Agile Methodology
	Business experience	mandatory		2-5 years’ experience in IT and Information Security environments; Capability to quickly understand end-to-end process flows and control needs; Experience in Reports and Memo drafting, and reports ad presentations addressed to senior management.
		preferable		Preference will be given to candidate that have a good knowledge / practical experience of different bank entities / processes if possible.
Soft skills	Quick self-starter, pro-active attitude; team player;   Highly productive and able to deliver within agreed deadlines   Excellent English writing skills;   Strong analytical skills and detail oriented.   Ability to produce structured and concise documents;   Ability to work in a dynamic and multi-cultural environment;   Able to manage and prioritize tasks running in parallel.

Start date: ASAP Duration: 6 months Location: Brussels

Start date: ASAP Duration: 10 months of expected mission duration - Initial contracts will be of 3 months, extendable. Location: Brussels Context: Project and support on telephony systems

• Assist in Telephony migration projects
• Together with the project team guarantee that the business requirements continue to be offered during & after the project.
• Guarantee that the offered solution is in line with the companies’ security policies.
• Do work in respect of the company's change process and without business impact.
• Assist in the aftercare related to the migrations.
• Document the delivered solution.

Education: Bachelor/Master Languages: Fluent in Dutch or French, and fluent in English Required knowledge / Experience

• 5 years of professional experience
• More than 3 year experience in the domain of voip telephony
• Experience with telephony migration projects

• CISCO UC / Jabber
• Nice recording / Engage

• Good communication skills.
• Team player.
• Able to work independently.
• Pragmatic-flexible and solution driven.

 

• Adopt a coordinating role and support in process changes related to credit, and foresee the necessary change management.
• Assume, as process responsible, the responsibility for the identification, development and specification of process improvements within the end-to-end horizon, and to ensure that stakeholders support and endorse the proposed solution.
• Define the As Is and To Be processes.
• Detecting and documenting potential improvements.
• Participating in the Customer Experience Design. Integrate the “outside in” processes and swim lanes in the business needs analysis.
• Ensure the timetable, the scope and quality for the delivery of process deliverables.
• Align with all participants and experts associated with the project for the Process dimension, while improving their outputs and ensuring their accuracy.
• Work on the principles of existing methodology for project management, process management (BPM / ARIS) and business analysis.
• Create and maintain documentation of the concerned processes.
• Using your experience (processes, projects and credits), support colleagues within the team.

Start date: ASAP Duration: 12 months Location: Brussels

• Out of the box thinking
• Good Communication and Influencing skills
• Good writing skills
• Ability to interact with diverse levels of audiences
• Strong empathy to integrate “sensitive” environments
• Good planner
• Resistance to stressful situations
• Self-starter and pro-active attitude
• Willing to travel abroad

If you think that your profile fits to these requirements, please send us your CV  with the job title as reference in your email subject. Feel free to also share this job to a friend who can be interested.