Security Consultant – Cybersecurity Testing & Exposure Management

The organisation is a Flemish government agency dedicated to digitalisation. It develops a coherent government-wide information policy and supports the transition of the Flemish government towards an information-driven government. It is committed to the digital transformation of public services and of cooperation between governments, citizens and businesses, and it guides Flemish and local authorities in their digital transformation and their search for the government of tomorrow. The organisation's products and services are organised into programmes to achieve maximum synergies and optimal service delivery to partners within the Flemish government.

Assignment context

You will work within the organisation's cybersecurity centre of expertise. This centre serves as the central centre of expertise for digital security within the Flemish government. It supports both Flemish entities and local authorities with cybersecurity expertise, services and coordination.

Within this context, a structural service is being developed around cybersecurity testing and exposure management. Its aim is to identify vulnerabilities in a timely manner and to support organisations within the Flemish government and local authorities in strengthening their digital security.

As a member of Cybersecurity Testing & Exposure Management, you are responsible for building, managing and further developing the cybersecurity testing and exposure management services within the Flemish government.

You translate stakeholder needs into a clear product vision, roadmap and concrete services. You ensure sustainable, scalable and high-quality service delivery and monitor the quality of the results delivered, working closely with internal teams and external partners. You are responsible for further professionalising the services, embedding expertise within the organisation and continuously improving processes, methodologies, working methods and supporting solutions.

The role combines product ownership with in-depth subject-matter expertise. In addition to designing, steering and improving the services, you take an active role in day-to-day operations. You provide subject-matter support on complex cases, monitor the quality of activities and results, and actively contribute to delivering the services.

Key tasks and responsibilities

• You translate the needs and challenges of Flemish entities and local authorities into concrete improvements and further development of the services.
• You organise, carry out and coordinate activities within Cybersecurity Testing and Exposure Management and monitor their quality.
• You support stakeholders in determining scope, priorities, approach and remediation.
• You review and validate results, reports and deliverables and monitor the quality of the activities carried out.
• You manage and further develop supporting processes, methodologies and solutions within the scope of the services.
• You prepare and guide sourcing and procurement processes, including drawing up requirements, evaluation criteria and quality requirements.
• You manage external service providers and follow up on the services delivered through SLAs, KPIs, service reviews and improvement actions.
• You ensure the use of recognised methodologies and reference frameworks, such as OWASP, PTES or equivalent standards.

Knowledge retention and continuous improvement

You actively build expertise in cybersecurity testing and exposure management and embed it within the organisation through knowledge sharing, documentation, standards and working methods. You support the further development of internal competencies so that internal teams can take on a greater role in the services over time. You also actively keep track of technological and market developments in the field and translate them into improvements to the services, processes, methodologies and tooling.

Cybersecurity Testing includes penetration testing, vulnerability disclosure programmes, bug bounty programmes and other forms of offensive security testing.

Exposure Management includes vulnerability management, attack surface management (ASM) and related processes, methodologies and solutions for managing vulnerabilities and exposure risks.

Technical context

The technical environment in which these services are offered is highly diverse. It spans various technologies, platforms and architectures used within the Flemish government and by local authorities. This means the services must be applicable to a wide range of applications, infrastructures, cloud environments and digital platforms.