Interim Chief Information Security Officer (Freelance)

About the role

We are looking for an experienced Interim Chief Information Security Officer to act as a strategic advisor and operational leader for a prominent organization in Luxembourg. This long‑term freelance engagement runs through 2027 and combines on‑site and hybrid work.

Key responsibilities

• Align the organization with NIS2 directive requirements and ensure ongoing regulatory compliance.
• Maintain and evolve the corporate cybersecurity risk register and produce security dashboards, KRIs and KPIs for senior management.
• Participate in architecture boards, evaluate security impacts of new projects and issue formal security validations.
• Oversee the full vulnerability management lifecycle and track remediation plans.
• Lead incident preparation, crisis tabletop exercises and business continuity planning.
• Conduct a comprehensive cybersecurity maturity assessment and define a 12‑to‑24‑month security roadmap.
• Transfer knowledge to internal IT teams and compile a transition playbook for the future permanent CISO.

Required profile

• 10+ years of experience in cybersecurity and IT governance, including previous CISO or senior GRC roles.
• Fluent in both French and English, able to present technical topics to French‑speaking teams and English‑speaking board members.
• Deep knowledge of NIS2 and strong mastery of security frameworks such as ISO 27001/2, NIST or CIS.

Required skills

• Microsoft 365
• Entra ID
• Active Directory
• Cloud infrastructures