Chief Information Security Officer

Overview

Who are we?

Every year, 2.5 million Belgians rely on the independent advice of a notary. At Fednot - the country's largest professional federation - we support notaries so they can focus on what they do best: helping citizens through important moments in their lives. Together, we make a difference for both the profession and the public.

Fednot plays a leading role by offering a broad and innovative range of services and solutions.

Notary offices can turn to us for legal advice, software tools and support, guidance on office management, as well as HR solutions.

Our offices are located in the heart of Brussels, close to Central Station, and are easily accessible.

We offer a pleasant and stimulating working environment, with plenty of room for initiative.

To further strengthen our security capabilities, we are looking for an experienced

Chief Information Security Officer (CISO)

Purpose of Role:

As Chief Information Security Officer, you are responsible for Fednot’s overall information security posture, covering both digital and physical security. You lead the Information Security team and ensure that security initiatives support the organization's strategic objectives while safeguarding highly sensitive notarial information and protecting the integrity, confidentiality, and resilience of the broader notarial ecosystem. You act as a trusted advisor across the organization on all information security matters, ensuring that the security of notarial data and services remains at the core of decision-making.

You want:

• To lead, coach and develop the Information Security team, including hiring and capability building;
• To define, implement and continuously improve information security policies, controls and governance frameworks;
• To assess and manage security risks through risk assessments, penetration testing, vendor reviews and security audits;
• To oversee security monitoring, incident response, forensic investigations and threat intelligence activities;
• To promote security awareness and support the continuous improvement of security maturity across the organization;
• To develop security dashboards and report on security performance and risks to executive management;
• To act as the key point of contact for cyber insurance, regulatory compliance, internal and external audits, and ISO 27001 certification;
• To define, manage and deliver the Information Security roadmap and budget, while supporting notaries during critical security incidents.

You have:

• A Master's degree in Information Technology, Cybersecurity, Computer Science, or at least 8 years of experience in Information Security.
• Proven experience implementing and maintaining ISO 27001 frameworks. Experience as an internal or external auditor is considered a strong asset;
• Professional certifications such as CISSP, SSCP, or an equivalent information security qualification;
• A solid understanding of IT infrastructure and technologies, including MPLS, IPVPN, TCP/IP, storage solutions, blade servers, video conferencing systems, and backup strategies.
• Good knowledge of information security and regulatory frameworks, including NIS2, DORA, GDPR, eIDAS and the Cyber Resilience Act (CRA);
• Demonstrated leadership experience, with a track record of managing, coaching, and mentoring IT and information security professionals.

You are:

• An excellent communicator with strong presentation skills and with the ability to translate security requirements into practical business solutions;

• Pragmatic, analytical, solution-oriented with a positive mindset;
• A natural leader who inspires collaboration and accountability;
• Fluent in Dutch, French and English.

What we offer:

• Challenging and impactful projects to work on, using the latest methodologies and technologies, within a growing and economically stable sector;
• The opportunity to define and drive the security strategy of a business-critical organization;
• Room for personal growth, creativity and autonomy within an open and collaborative environment;
• A competitive salary package, extralegal advantages, insurance coverage, car, bonus and net allowance, public transport, luncheon vouchers, and the possibility to build up holidays.

Where are you going to work?

We offer a hybrid working model, allowing employees to work remotely up to 60% of the time.

If you apply for a position within our organization, your CV, cover letter, the information and documents collected during the assessment of your application, as well as any other documents you provide to us—including identification and contact details and information relating to your academic and professional background—will be retained for a period of three years following the completion of the recruitment process for the relevant position. This processing is based on our legitimate interest (Article 6(1)(f) of the General Data Protection Regulation (GDPR)), in particular to enable us to contact you regarding future employment opportunities or should you apply for another position within our organization at a later date. Your personal data will not be disclosed to third parties, except to any data processors acting on our behalf. We ensure that appropriate data processing agreements, compliant with the GDPR, are concluded with these processors.As a data subject, you have the rights provided under the GDPR, including the right to access, rectify or erase your personal data, as well as the right to object to the processing of your data. You may exercise these rights by contacting our Data Protection Officer (DPO):

• by email: [email protected]; or
• by post: Privanot ASBL, Rue de la Montagne 30, 1000 Brussels, Belgium.

If you believe that we have not processed your personal data in accordance with the applicable data protection legislation, you have the right to lodge a complaint with the Belgian Data Protection Authority (https://www.dataprotectionauthority.be).