Job Description

Mission Overview:

Keystone Solutions is seeking an Expert Cybersecurity to join our consultancy mission at a client site. In this role, you will ensure that healthcare and welfare services remain digitally secure, reliable, and resilient in the face of increasing cyber threats. You will actively contribute to the development of secure systems, reliable data, and robust processes that protect the organization and its services.

Key Responsibilities:

As an Expert Cybersecurity, you will play a central role in the development, implementation, and monitoring of cybersecurity and information security. Your responsibilities will include:

• Managing and further developing the Information Security Management System (ISMS), including policies, processes, procedures, documentation, and review cycles, while leading the path towards ISO 27001 certification.
• Identifying, analyzing, and monitoring cybersecurity risks, managing the risk register, and periodically reporting to relevant committees.
• Ensuring compliance with relevant standards and regulations, including ISO 27001, NIS2, and CyberFundamentals (CyFun), and preparing and guiding audits.
• Managing the Statement of Applicability and audit documentation to ensure the organization remains audit-ready.
• Maintaining the Incident Response Plan, coordinating security incidents, and ensuring proper follow-up on reporting obligations and improvement actions.
• Contributing to business continuity and disaster recovery initiatives, with a focus on security aspects.
• Assessing supplier and supply chain risks and ensuring compliance with security requirements among critical partners.
• Directing external security partners and monitoring follow-up on vulnerability management, patch management, monitoring, and identity & access management.
• Enhancing security awareness within the organization through training, education, and awareness campaigns.
• Supporting management and executives with clear reporting on KPIs, risks, incidents, and the progress of cybersecurity initiatives.

Candidate Profile:

We are looking for an experienced cybersecurity expert who thrives in a developing organization. You combine strong technical expertise with a pragmatic approach and are energized by building and embedding cybersecurity within a complex organizational context. You should identify with the following profile:

• Master's degree, preferably in an ICT-related or business administration field, or equivalent through relevant experience.
• At least 5+ years of demonstrable experience in information security, cybersecurity, or ICT risk management.
• Thorough knowledge of information security frameworks and standards such as ISO 27001, NIS2, and CyberFundamentals (CyFun).
• Experience with risk management, audits, compliance, and establishing or managing an ISMS.
• Understanding of modern IT environments, including infrastructure, cloud, identity, and security services.
• Insight into security operations, vulnerability management, supplier management, and incident management.
• Certifications such as CISSP, CISM, ISO 27001 Lead Implementer, or ISO 27001 Lead Auditor are a strong asset.
• Strong analytical skills, structured work approach, and ability to translate complex issues into actionable steps and advice.
• Ability to engage stakeholders at various levels and smoothly transition between operational teams, management, and executives.
• Experience in the healthcare sector or with the protection of sensitive personal data is a plus.
• Fluent communication in Dutch and a good command of English.

Practical Information:

The work regime can be part-time (4/5) or full-time, with at least 2 days in the office on fixed days, Tuesday and Thursday.

If you are ready to tackle technical and strategic challenges in a dynamic consultancy environment, apply today at Keystone Solutions Career Portal.

Duration: As soon as possible - 18/12/2026 3 months • (full time)

Skills required:

• Audit Expertise - Level: Advanced - Most recent: 1 to 3 years ago
• CyberFundamentals - Level: Advanced - Most recent: Any time
• Incident Management - Level: Advanced - Most recent: Any time
• ISMS - Level: Intermediate - Most recent: Any time
• ISO27001 - Level: Advanced - Most recent: Any time
• NIS2 - Level: Advanced - Most recent: Any time
• Risk Management - Level: Advanced - Most recent: Any time
• Security Tooling - Level: Intermediate - Most recent: Any time

Language requirements:

Dutch

Level Native or bilingual proficiency

English

Level Professional working proficiency