Job Description

NIS2 Cybersecurity Governance Consultant (Part-Time)

Location: Brussels, Belgium (Hybrid)
Start Date: August 2026
Contract Duration: 5 months (Part-Time – 1 to 2 days per week)

About the Role

We are looking for an experienced NIS2 Cybersecurity Governance Consultant to support the relaunch and structuring of a major NIS2 compliance programme within a critical digital services environment.

The successful consultant will act as a trusted advisor, providing expert guidance to the internal Programme Manager while helping establish a sustainable governance framework, prioritise compliance initiatives, and implement a risk-based approach aligned with NIS2 requirements.

This is an excellent opportunity for a senior cybersecurity professional with extensive experience in governance, compliance, and risk management to make a significant impact on a high-profile programme.

Key Responsibilities

• Review and assess the existing NIS2 compliance programme, including gap analyses, assessments, governance documentation, and action plans.
• Establish a structured governance model for the programme, including reporting, prioritisation, and decision-making processes.
• Assess critical business services, dependencies, suppliers, and cyber risks.
• Define a risk-based methodology for prioritising compliance activities.
• Develop a practical Minimum Viable Compliance (MVC) approach to accelerate NIS2 readiness.
• Identify quick wins and recommend pragmatic remediation activities.
• Build a phased roadmap for achieving sustainable compliance.
• Support, coach, and transfer knowledge to the internal Programme Manager.
• Facilitate workshops with key stakeholders and senior management.
• Produce executive-level reports, governance documentation, and programme updates.

Required Experience

• Proven experience delivering NIS2 compliance programmes for essential or important entities.
• Strong background in cybersecurity governance, risk management, and compliance.
• Experience establishing governance frameworks and managing compliance programmes.
• Knowledge of public sector or digital services environments is highly desirable.
• Ability to engage with senior stakeholders and deliver executive-level documentation.
• Experience mentoring or supporting programme managers and internal teams.

Preferred Certifications

• CISSP
• CISM
• ISO 27001 Lead Implementer (Senior)
• Equivalent cybersecurity governance certifications will also be considered.

Work Arrangement

• Part-time engagement (approximately 1–2 days per week).
• Hybrid working model with a combination of on-site meetings in Brussels and remote work.
• Opportunity to extend beyond the initial contract based on programme needs.

If you have extensive experience in cybersecurity governance and NIS2 compliance and are looking for a strategic consulting engagement, we'd love to hear from you.