Security Engineer - DORA
Position Overview
DigiTribe is looking for an experienced Security Engineer Consultant to support on a client project in assessing, advising on, and implementing cybersecurity and operational resilience strategies to meet DORA requirements. The consultant will work closely with the dedicated IT team and report to the Head of IT. The Digital Operational Resilience Act (DORA) is a five-pillar regulatory framework covering ICT Risk Management, Incident Reporting, Operational Resilience Testing, Third-Party Risk Management and information-sharing.
Key Responsibilities
- DORA Compliance Advisory: provide expert guidance on aligning cybersecurity frameworks, IT risk management, and operational resilience strategies with DORA requirements.
- Gap Analysis & Risk Assessment: conduct assessments to identify gaps in existing cybersecurity and ICT risk management practices.
- Policy & Framework Development: assist in developing ICT risk management, incident reporting, third-party risk management, and business continuity frameworks.
- Incident Response & Crisis Management: support in establishing incident reporting mechanisms aligned with DORA mandates.
- Testing & Simulation: collaborate with third-party suppliers to conduct penetration testing, vulnerability assessments, and operational resilience testing to meet regulatory standards.
- Regulatory Reporting & Documentation: prepare compliance reports and ensure proper documentation for audits and regulatory scrutiny.
Skills & Qualifications
Technical Skills
- At least 5 years of relevant experience in cybersecurity, with proven hands-on expertise in vulnerability assessment, monitoring tools, logging tools and access management.
- Strong knowledge of DORA and related regulations: NIS2, GDPR, EBA/ECB ICT risk guidelines, and ISO 27001/27005.
- Experience in IT risk management, operational resilience and/or cyber risk within financial services.
- Strong knowledge of cloud security, third-party risk management and penetration testing methodologies.
- Experience with cyber risk assessments, BCP, disaster recovery and incident response.
- Familiarity with cybersecurity frameworks: NIST, CIS, ISO 27001, MITRE ATT&CK.
- Relevant certifications are a plus: CISM, CISSP, CRISC, CISA, ISO 27001 Lead Implementer/Auditor, CEH.
- Knowledge of Azure infrastructure setup and ServiceNow is a plus.
Business & Soft Skills
- Proven experience developing and writing clear information security processes and procedures.
- Ability to engage with regulators, auditors, and senior stakeholders to explain compliance strategies.
- Excellent written and oral communication skills, with strong presentation abilities adapted to the audience.
- Team player, proactive and quick self-starter, comfortable in dynamic and multicultural environments.
- Strong analytical and synthesis skills, quality-minded with eye for detail.
- Goal-oriented, autonomous, and able to work under pressure and meet deadlines.
Assignment Details
- Location: Brussels - Belgium
- Work arrangement: 60% on-site
- Languages: English (mandatory - fluent oral and written), French and/or Dutch (preferred)
- Education: Cyber Security degree or equivalent; relevant certifications strongly valued
Our Offer
We provide a stimulating, people‑focused and expertise‑driven environment:
- A competitive salary with performance‑based bonuses.
- A company car with Fuel/Electric Card
- All necessary tools for your mission: Laptop, Phone, Phone Subscription.
- Comprehensive social security and health benefits in Belgium.
- Meal Vouchers, Eco cheques.
- Hospitalization Insurance & Group Insurance (Retirement)
- Opportunities for professional training and certifications.
- Clear Career plan and growth opportunities created together with Manager.
- Exciting assignments with clients engaged in innovative IT projects.
