IT Compliance Documentation Specialist – NIS2

Location: Brussels, Belgium – Hybrid

Rate: €765 per day

Duration: 9–12 months

Languages: Fluent French and English required

A leading international transport organisation is looking for an experienced IT Compliance Documentation Specialist to support its journey towards NIS2 Essential-level compliance.

This is a hands-on role focused on working with application owners, technical teams and third-party providers to capture undocumented processes and turn complex information into clear, audit-ready documentation.

You will use AI tools such as Microsoft Copilot and Claude as a core part of your workflow to accelerate drafting, summarise stakeholder interviews and structure information into compliant templates.

Key responsibilities

- Interview application owners, technical teams and third-party suppliers in French and English.
- Produce application cards, architecture and data-flow descriptions, access matrices, third-party mappings and risk register entries.
- Collect and organise compliance evidence, including access reviews, vulnerability scans, penetration-test reports, backup and restore tests, change records and vendor assessments.
- Draft procedures covering security policies, access control, backup and recovery, compliance and KPI measurement.
- Track application documentation against NIS2 and CyFun Essential controls.
- Identify the difference between missing documentation and genuine process gaps,



then lead actions to close them.
- Prepare audit materials and support internal assessments and certification readiness.
- Use AI assistants consistently to draft, summarise and structure documentation.

Essential experience

- 3–8 years’ experience in IT governance, risk and compliance, information security documentation or technical/business analysis within a regulated environment.
- Experience producing ISMS or compliance documentation aligned with frameworks such as NIS2, ISO 27001, NIST or CyFun.
- Fluent French and English, both written and spoken.
- Strong stakeholder interviewing and requirements-gathering skills.
- Regular, demonstrable use of AI tools such as Microsoft Copilot, Claude or similar.
- Ability to understand application architecture diagrams, vulnerability reports and vendor contracts.
- Experience working in a complex, multi-vendor or outsourced environment.
- Excellent written communication, document-structuring and attention-to-detail skills.

Desirable

- Experience within transport, critical infrastructure or another regulated, cross-border sector.
- Familiarity with IT/OT environments.
- Knowledge of ArchiMate.
- ISO 27001 Lead Implementer/Auditor, CISA or a similar certification.

This role would suit someone who can confidently extract knowledge from busy stakeholders, create structured compliance documentation and ensure every application record is supported by clear, dated evidence.

📌 Compliance specialist (España)
🏢 Ventula Consulting
📍 España