Ce que vous allez faire
The Business Security Advisor is a trusted security partner for business and technology stakeholders. In this role, you provide practical, risk-based information and cyber security advice across the full lifecycle of business initiatives, products, services, technology solutions and supplier engagements. You help stakeholders understand security risks, define appropriate requirements and controls, and make informed decisions aligned with the company’s security strategy, policies, regulatory obligations and risk appetite.
Key responsibilities include:
- Acting as the main security contact for assigned business and technology stakeholders
- Providing pragmatic advice on information and cyber security risks in a business context
- Supporting security risk assessments for projects, systems, applications, processes and services
- Identifying risks, recommending mitigating controls and ensuring follow-up through remediation, acceptance or escalation
- Embedding security by design into projects, products and technology solutions from an early stage
- Reviewing architectures and solution designs from a security perspective
- Advising on topics such as identity and access management, authentication, privileged access, data protection, encryption, cloud security, network security, application security, vulnerability management, logging, monitoring, resilience and third-party security
- Translating security policies, standards and regulatory requirements into practical business actions
- Supporting supplier and third-party security assessments, including review of security evidence and contractual requirements
- Assisting with audits, compliance activities and control reviews, and helping resolve identified gaps
- Supporting incident response by providing business-specific security context and contributing to post-incident improvements
- Promoting security awareness, ownership and a risk-based security culture across the organization
- Contributing to security governance, reporting, risk summaries and continuous improvement initiatives
This role acts as a bridge between the business, technology teams and the wider security organization, enabling the business to move forward securely while maintaining an appropriate balance between risk, business value, user experience and delivery timelines. You operate according to the principle: “Enable the business to achieve its objectives securely, by making security risks visible, understandable and actionable.”
Qui êtes-vous ?
Required
Bachelor’s or Master’s degree in Information Security, Cyber Security, Computer Science, IT, Risk Management or a related field, or equivalent experience
Several years of experience in information security, cyber security, IT risk, security architecture, security assurance or a similar role
Strong understanding of security principles, controls and risk management
Experience with security risk assessments and working with business and technology stakeholders
Ability to translate technical security risks into clear business impact
Good knowledge of security policies, standards and frameworks
Solid understanding of identity and access management, data protection, network, application and cloud security, and vulnerability management
Strong communication, stakeholder management, analytical and problem-solving skills
Professional proficiency in English. Knowledge ok French and/or Dutch is a plus.
Preferred
Experience with third-party or vendor security assessments
Relevant certifications such as CISSP, CISM, CRISC, CISA, ISO 27001 or cloud security certifications
Familiarity with frameworks and standards such as ISO 27001, NIST, CIS Controls, OWASP, COBIT, PCI DSS and relevant privacy/cybersecurity regulations
Competencies
Business-oriented and risk-based mindset
Strong advisory and influencing skills
Clear communicator across technical and non-technical audiences
Collaborative, proactive and accountable
Committed to continuous learning and…