A major Belgian public-sector regulator is implementing NIS2 requirements across its IT infrastructure and has launched the SECaaS2 programme to deliver shared security, identity and infrastructure services. This senior role focuses on programme and governance-level coordination, supplier orchestration and reporting, with a practical understanding of cloud introductions and NIS2 compliance required.
The mission
The programme sits at the intersection of infrastructure, information security and regulatory compliance. SECaaS2 and related initiatives will deliver organisation-wide, shared services for security and identity rather than business-application changes, with implementation executed by specialised external suppliers and overseen by the ICT project management team and PMO. The work matters because it defines how the organisation demonstrates compliance with NIS2 and maintains secure, shared infrastructure services.
On a day-to-day basis you will operate at programme level: consolidate progress across parallel projects, coordinate multiple external vendors, identify and manage dependencies and risks, and present structured status and decision points to governance bodies and senior management. You will act as the central contact for partners, challenge technical proposals where needed, and ensure alignment with GDPR concepts and the organisation’s security policies.
Your responsibilities
- Lead programme governance and steer decision-making so NIS2 deliverables remain aligned with regulatory objectives and PMO expectations.
- Coordinate and hold multiple external suppliers to account, ensuring timely delivery of milestones, clear handovers and contract-aligned outcomes.
- Consolidate progress, risks and dependencies across infrastructure, security and identity initiatives, producing executive-ready reports and dashboards.
- Challenge technical options and represent the organisation in governance forums to ensure solutions meet cloud, security and compliance requirements.
- Drive escalation and remediation when cross-project dependencies threaten timelines or regulatory coverage.
- Facilitate stakeholder workshops and supplier review sessions to secure approvals and keep governance bodies informed.
Your profile
Essential skills
- Proven senior programme or project management experience in complex IT infrastructure, security or regulatory compliance contexts.
- Credible technical understanding of cloud introductions and infrastructure services to review supplier proposals and arbitrate trade-offs.
- Practical knowledge of NIS2 principles and information security controls, and ability to translate them into programme requirements.
- Familiarity with GDPR concepts as they relate to security and identity initiatives.
- Experience using Prince2, Agile or equivalent delivery and governance frameworks in multi-supplier environments.
- Strong stakeholder management, written and verbal reporting skills, and experience presenting to executive governance bodies.
Languages
- French, C2 or Dutch, C2 (mother tongue level required for one of the two).
- Other national language, C1.
- English, B2.