NIS2 Security & Compliance Expert (ID: 2027)

• Act as a subject matter expert for the NIS2 project, providing advice on security and compliance requirements specific to ICT service management and Digital Service Providers under NIS2.
  
• Develop guidance and advice on identifying systems and suppliers critical for intracompany service delivery.
  
• Assist SITI BV in identifying the scope of systems and suppliers critical for their operation.
  
• Map current Shell practices to NIS2 requirements for ICT service companies and Digital Service Providers.
  
• Ensure that key security measures are documented and fit-for-purpose for the unique challenges of being an intracompany service provider.
  
• Support the IT organization in developing a strategic plan to demonstrate compliance with NIS2.
  
• Provide SME knowledge and guidance to drive consistent adoption of Group frameworks to meet legal requirements in a highly matrixed business.
  
• Ensure alignment of business continuity and resilience oversight and reporting capabilities for intercompany IT services.

• 10+ years of experience in IT security or compliance, with expertise in Risk Management, Financial Regulations, and Governance.
  
• Experience working with Legal and Regulatory requirements for IT, interpreting requirements, and defining best practices.
  
• Awareness of current global cybersecurity legislation and security best practices.
  
• Previous experience with NIS for Digital Service Providers is an advantage.
  
• Broad understanding of Third-Party Management, Service Management, Governance and Risk Management, Compliance.
  
• Experience in ICT service management.
  
• Detailed knowledge of ITIL processes.
  
• Previous experience with intracompany service management is an advantage.
  
• Detailed knowledge of common IT security standards such as ISO 27001, NIST, COBIT.
  
• Experience in Third-Party Risk Management, identifying, and assessing the criticality of third-party vendors.
  
• Ability to communicate and engage with a wide range of stakeholders.
  
• Articulate complex or technical concepts in a concise, simple, and understandable way.
  
• Experience in audit management/audit assurance is an advantage.
  
• Associated Cybersecurity/Information Risk certifications (e.g., CISM, CGRC) are an advantage.
  
• Ability to work independently and collaboratively in a fast-paced and dynamic environment.
  
• Experience in delivering change through influencing, without formal authority.
  

• Demonstrate mastery in Legal & Regulatory requirements.
  
• Exhibit mastery in Business Analysis Planning & Monitoring.
  
• Show mastery in Business Continuity.
  

• A collaborative and innovative workplace that encourages creativity and supports professional growth.
  
• Opportunities to lead and implement cutting-edge technology solutions in a robust environment.
  
• Competitive compensation and benefits, with opportunities for career advancement and continuous learning.
  
• A dynamic team environment where your skills and expertise will be valued and where you can make a significant impact on our technological direction.
  

SOLLICITEER DIRECT!