Chief Information Security Officer – Service Consultant

About the role

We are seeking an experienced Chief Information Security Officer (CISO) to provide CISO‑as‑a‑Service for a Luxembourg‑based client. The consultant will act as an interim CISO, guiding management on cybersecurity strategy, governance and compliance until a permanent CISO is appointed.

Key responsibilities

• Steer information‑security governance and support NIS2 regulatory compliance.
• Maintain and evolve the cybersecurity risk register and produce security dashboards for management.
• Develop, update and enforce security policies, standards and procedures.
• Assist technical teams on projects with security impact and supervise vulnerability management.
• Participate in incident response, crisis management and business continuity exercises.
• Provide architecture board reviews and issue security validations.
• Deliver a comprehensive cybersecurity maturity assessment, risk map, 12‑24‑month roadmap and transition package for the future permanent CISO.

Required profile

• Minimum 10 years of experience in cybersecurity and IT governance.
• Proven track record as a CISO, outsourced CISO or senior cybersecurity consultant.
• Strong knowledge of ISO 27001, ISO 27002, NIST, CIS frameworks and NIS2 requirements.
• Excellent communication skills and ability to work with technical teams, business units and senior management.

Required skills

• ISO 27001
• ISO 27002
• NIST framework
• CIS controls
• NIS2 compliance
• Microsoft 365
• Active Directory
• Cloud and on‑premises infrastructure security

What we offer

• Full‑time, five‑day week contract until end‑2027 with possible extension.
• Hybrid work model: on‑site in Luxembourg with two remote days per week.
• Laptop and dedicated workspace provided by the client.