Security Manager

Job Title: Senior Information Security ManagerLanguage: EnglishLocation: Brussels, BelgiumDuration: 02/01/2026-31/12/2026Work Mode: Hybrid (2 or 3 days onsite per week)Work regime: Full timeJob Description - Roles and ResponsibilitiesMissionDevelop and maintain security strategy and governance framework.Create, update, and manage ISMS documentation including the ISMS Manual, SoA and oth-er compliance documentation.Drive the full policy lifecycle: drafting, stakeholder review, legal review, publication, com-munication, and regular ISMS review cyclesEnsure compliance with ISO 27001:2022, NIS2, ISAE 3000 (Type 1/2), OPDE/MVS, and other relevant standards.Collaborate with suppliers to ensure security requirements are met.Ensure security design integration for the Configuration Management Database (CMDB)Oversee operational security processes including access control, monitoring, and incident response.Contribute to SOC development and harmonize monitoring requirements.Manage vulnerability assessments and remediation plans.Develop CN-specific continuity scenarios and support the creation/monitoring and testing of BCM/DR plansEnsure user training, awareness activities, and publication of materialsPrepare and ensure internal and external audits.Lead the corrective action and continuous improvement process following audit findingsProvide regular security posture reports to management and steering committees.Requirements Expertise in ISO 27001:2022, NIS2, ISAE 3000 audit models, and MVS OPDE and other security frameworks.5+ years of experience in security management roles.Experience in multi-supplier ecosystems and documentation-heavy environments.Strong knowledge of cybersecurity risk management and audit processes.Experience in operational security, including access control and incident response.Familiarity with supplier security, ITSM process evaluation and hosting/data-center security.Knowledge of vulnerability management and monitoring tools.Proficiency in SharePoint OnlineKnowledge of energy sector ecosystem and operational structures (e.g. ENTSO-E, TSOs, RCCs, etc.)Fluent in English