Information Security Analyst (Second Level)

At RELYzIT, we don't recruit — we build.

We unite exceptional builders: engineers, architects, creators, across the BENELUX and the GCC. Vetted through VECTOR7™'s multi-signal evaluation, you evaluate once and carry that credential forever. This is more than work. This is where builders build the future.

Information Security Analyst (Second Level) - 15 months - Belgium

Freelance Position | Partial Remote | 15-Month Engagement

Intro

RELYzIT Talent is seeking an elite Information Security Analyst (Second Level) for a high-impact, freelance engagement with our client in Belgium. This is your opportunity to drive real change in information security, supporting a mission-critical NIS2 implementation and audit-readiness journey. Join a builder-first community where your expertise shapes the future of secure, sustainable infrastructure.

Why This Role Matters

Our client is on a mission to safeguard water technology and infrastructure, ensuring compliance with evolving security standards and ecological objectives. As an Information Security Analyst (Second Level), you will be pivotal in validating and strengthening the organization’s security posture. Your work will directly influence audit outcomes, regulatory compliance, and the resilience of essential services that impact millions. This is a role where your analytical rigor and independent judgment will help build a safer, more sustainable environment.

What You’ll Be Doing

• Independently assess the quality and completeness of documentation and implementation evidence provided by first-line domains, using CyFun guidance.


• Validate that evidence supports assigned scores and is robust enough to withstand external auditor scrutiny—no assumptions, only facts.


• Deliver clear, actionable feedback to domain owners, formulating concrete improvement points for continuous enhancement.


• Build and maintain a comprehensive evidence register, ensuring all documentation is audit-ready without the need for rework.


• Support the organization’s journey from “important” to “essential” NIS2 compliance, with ongoing involvement beyond April 2027.


• Collaborate closely with the CISO, leveraging their support for methodology, escalation, and critical review.


• Operate strictly in a second-line capacity—no operational security, pentesting, SOC, or engineering tasks.

What We’re Looking For

• 3 to 6 years of hands-on experience in information security, compliance, or IT audit roles.


• Proven ability to interpret and assess technical evidence, including configuration exports, log files, tickets, remediation actions, and scan reports.


• Strong familiarity with control frameworks such as CyFun, ISO 27001, and/or NIST CSF.


• Critical, analytical, and independent mindset—able to challenge assumptions and drive evidence-based improvements.


• Ownership mentality: you take initiative, deliver outcomes, and elevate standards across the board.


• Excellent communication skills for delivering feedback and collaborating with both technical and non-technical stakeholders.

Technical Skills & Requirements

• Audit (Intermediate): Experience conducting or supporting IT/security audits.


• ISO 27K (Intermediate): Working knowledge of ISO 27001 standards and implementation.


• NIST (Intermediate): Familiarity with NIST Cybersecurity Framework (CSF) controls and assessments.


• Evidence Assessment: Ability to critically evaluate technical and procedural documentation.


• File Building: Experience creating and maintaining evidence registers or audit files.

Language Proficiency

• Professional proficiency in English is required.

Other Requirements

• Availability to commit to a 15-month freelance engagement, with partial remote flexibility.


• Willingness to work on-site in Belgium as required by the project.


• Alignment with RELYzIT Talent’s builder-first ethos and commitment to excellence.


• Only applications meeting all specified criteria (skills, experience, language, availability) will be considered.


• Upon commencement, consultants are deemed to have read and approved all project documentation and statements of work.