Information Security Analyst Second Line

Mission Overview

Keystone Solutions is seeking a skilled Information Security Analyst (Second Line) for a consultancy mission at a client site. In this role, you will support the implementation of NIS2 and prepare for audits within the organization.

Key Responsibilities

• Independently assess the quality of documentation and implementation evidence provided by the first line using CyFun guidance.
• Validate that the evidence supports the scores and is not based on assumptions to ensure it withstands external auditor scrutiny.
• Provide feedback to domain owners and formulate concrete improvement points for their action.
• Build documentation, including a proof register, that can be presented to the auditor without rework.
• Work towards achieving the important level and continue supporting preparations for the essential level after April 2027.

Requirements

• 3 to 6 years of experience in information security, compliance, or IT audit.
• Familiarity with control frameworks such as CyFun, ISO 27001, and/or CIST CSF.
• Ability to interpret and assess technical evidence such as configuration exports, log files, tickets, recovery, and scan reports.
• This role is situated in the second line and does not include operational tasks such as pentesting, SOC activities, or engineering.

This position reports to the CISO and requires a critical, analytical, and independent mindset. The CISO will support you with methodology and escalation when in doubt. The first line is responsible for self-assessment, providing evidence, and remediation.

At Keystone Solutions, we pride ourselves on our consultancy nature, offering dynamic projects that present diverse challenges across various client environments. As a consultant, you will experience turbo-charged learning and professional development opportunities, all while being part of a team that values ambition and core principles. Being a

Duration: As soon as possible - 31/12/2027 15 months • (part time 3/5)

Skills required

• auditIntermediate
• ISO 27KIntermediate
• NISTIntermediate

Language requirements

• DutchNative or bilingual proficiency
• EnglishNice to have