CISO & ISO Manager

Introduction

As a CISO & ISO Manager at Curios you act as a client’s senior security leader — shaping and executing their information-security strategy, running their ISO 27001 programme, and advising their management. This is a client-facing consultancy role across Belgian and international organisations, delivered in Dutch and English.

What you’ll do

• Lead the development and implementation of clients’ information-security programmes
• Conduct risk assessments and define risk-management strategies for clients
• Establish and maintain security policies aligned to standards and regulations (NIS2, ISO 27001, GDPR)
• Guide and mentor client security teams
• Serve as the primary point of contact for information-security matters for clients

What we’re looking for

Must have

• At least 5 years in information security, including a leadership or client-advisory role
• Professional certifications such as CISSP, CISM or equivalent
• Deep knowledge of cybersecurity frameworks and regulations (NIS2, ISO 27001, GDPR)
• Strong analytical, strategic and communication skills
• Professional working proficiency in Dutch and English — you’ll work with Belgian clients in both

Nice to have

• An advanced degree in Information Technology, Cybersecurity or a related field

What we offer

• A training and certification budget. We’re a team of 48+ certifications and we intend to keep it that way — your next certification is part of the job, not something you fit around it.
• A competitive salary with a 13th month, plus a net expense allowance on top.
• A company car and fuel card — you’ll be moving between client sites, home and our Antwerp office.
• Meal vouchers and eco-vouchers.
• Hospitalisation insurance.
• Phone and laptop.
• A 40-hour week with 12 ADV days, on top of your statutory holiday.
• Hybrid working — home, client sites and the Antwerp office.
• Consultancy work with real variety — Belgian and international organisations, across strategy and hands-on technical work.

About Curios

We’ve done cybersecurity, and only cybersecurity, since 2017. We’re a Belgian firm working across Europe, with 48+ certifications across the team and published CVEs in enterprise software. Client work is delivered by senior specialists — no juniors on client engagements — pairing board-level advisory with hands-on technical depth.

How to apply