Information Security Compliance & Governance Coordinator (NIS2 / ISO 27001) (m/w/d)

Job Description

We are an essential entity under the NIS2 Directive (as transposed in Belgium) and are building our compliance posture via the ISO/IEC 27001 framework. We are looking for a structured and assertive coordinator to join the Information Security team and keep our NIS2 / ISO 27001 compliance program on track.

You will be the operational backbone of the program: tracking policy implementation, collecting and managing evidence, maintaining reporting dashboards, and running the practical side of project governance.

Key responsibilities

• Compliance tracking and reporting
  • Build and maintain Excel dashboards and PowerPoint progress reports on NIS2 / ISO 27001 compliance for the management and steering committees
  • Consolidate status information, highlight gaps, delays and risks, and keep the data accurate and up to date
• Owner engagement and evidence management
  • Collaborate with the owners responsible for implementing policies and controls across the organization
  • Follow up with these owners, assertively and constructively, to obtain status updates and deliverables within agreed deadlines
  • Collect, review for completeness, and organise evidence supporting control implementation
  • Maintain a structured, audit-ready evidence repository with clear naming, versioning and traceability
• Project governance and coordination
  • Organise and coordinate governance meetings (steering committees, working groups, follow-up meetings), including agendas, minutes, action logs and follow-ups
  • Handle the administrative and practical aspects of project governance
  • Escalate blockers and overdue actions to the CISO in a timely manner
• Audit planning
  • Plan and coordinate the agendas for internal and external audits (ISO 27001 certification, surveillance audits, NIS2-related assessments)
  • Schedule auditees and interviews, and make sure documentation and evidence are ready beforehand
  • Track audit findings and follow up on corrective actions with the relevant owners

Qualifications

• Required
  • Bachelor's degree or higher (information management, business administration, IT, law, or a related field)
  • Working knowledge of information security governance and a good understanding of ISO/IEC 27001 (certification not required)
  • Highly structured, organized and detail-oriented, with a strong sense of follow-up
  • Assertive and credible communicator, comfortable chasing stakeholders at all levels
  • Advanced Excel skills (formulas, pivot tables, dashboards) and strong PowerPoint skills for clear management reporting
  • Strong written and spoken English and French; Dutch is a clear asset in the Belgian context
  • First experience (1–3 years) in compliance, GRC, audit support, PMO/PSO or a similar role
• Nice to have
  • Familiarity with NIS2 and the Belgian framework (national law, Centre for Cybersecurity Belgium, CyFun)
  • Knowledge of other frameworks (ISO 27002, NIST, CIS) or GRC tools
  • Foundation-level certification (e.g. ISO 27001 Foundation)
• Soft skills
  • Rigor, autonomy and reliability
  • Diplomacy combined with the ability to hold people to their commitments
  • Good sense of priorities and deadlines
  • Discretion when handling sensitive information

Additional Information

All our positions are open to both women and men and are, of course, open to people with disabilities.

Company Description

Everience is an international consulting group delivering AI-augmented digital services and placing people at the heart of the AI revolution.

With a presence in Europe, Africa, Asia and America, Everience offers its 4,000-strong workforce the most demanding and stimulating environment in which to transform and develop their skills, learning about new AI-based roles and building their future employability.

Through its Symbiotic Academy the group offers a unique hub for training, practical application and exchange where everyone can experiment, learn, and progress in the fields of artificial intelligence and data.

In accordance with its core purpose of orchestrating the symbiotic relationship between humans and AI in the workplace, Everience is making the augmented employee the driving force of a “symbiotic age”, where AI enhances talents and opens up new career opportunities.