Mission Overview:
Keystone Solutions is seeking a Medior Business Analyst to join our consultancy team for a client mission in Brussels focused on the preparatory phase for NIS2 compliance. As a Keystone Solutions consultant, you will work closely with the client's stakeholders, spending 2–3 days per week on-site, to deliver all activities described below and ensure audit-ready outcomes.
Consultancy Model at Keystone Solutions:
- You will be employed by Keystone Solutions and embedded at the client's site as a trusted consultant, collaborating directly with business and technical stakeholders while benefiting from Keystone's community, coaching, and support.
- Assignments are delivered under our consultancy framework, combining on-site presence with flexibility to work remotely as aligned with client needs.
- You will represent Keystone Solutions' standards of excellence, communication, and impact in every engagement.
Key Responsibilities (to be performed as a Keystone Solutions consultant):
- Inventory applications (mapping) and coordinate with application owners to document the authorization levels offered by these applications. The information collection must be structured and consolidated in a central repository. The role is to ensure the coordination of contributors, actively contribute to the enrichment of this deliverable, and ensure quality control and consistency.
- Coordinate, facilitate, and coach workshops with business stakeholders to model access roles. The responsibility is to produce a coherent model validated by the business security officers.
- Perform access recertifications and ensure the implementation of Least Access Privilege. The responsibility is to produce evidence that can be used during NIS2 audits.
- Establish business profiles documenting the necessary accesses, including privileged accesses. The responsibility is to produce a reusable documentation model for subsequent access requests, taking into account the constraints required by NIS2 (segregation of duties, Least Access Privilege, etc.).
- Cooperate with technical teams to translate these business profiles and RBAC models into operational tools such as IGA, Bastion, PIM, PAM, etc. The role is to bridge the business teams describing business activities and the operational teams implementing accesses in the various tools.
Role Level and Recency:
- Medior Business Analyst; most recent experience in the current year.
Required Skills and Tools Exposure:
- Active Directory – Intermediate level; most recent experience in the current year.
- Analysis and synthesis – Advanced level; most recent experience in the current year.
- Autonomy – Intermediate level; most recent experience in the current year.
- Bastion – Beginner level; most recent experience in the current year.
- Business Analyst – Advanced level; most recent experience in the current year.
- CMDB – Intermediate level; most recent experience in the current year.
- CyFun – Intermediate level; most recent experience in the current year.
- IGA – Intermediate level; most recent experience in the current year.
- PAM – Intermediate level; most recent experience in the current year.
- PIM – Beginner level; most recent experience in the current year.
- RBAC/ABAC – Intermediate level; most recent experience in the current year.
- SQL – Intermediate level; most recent experience in the current year.
- Teamwork – Intermediate level; most recent experience in the current year.
Languages:
- Dutch or French – Native or bilingual proficiency.
- English – Professional working proficiency.
Engagement Details:
- Location: Brussels, Belgium (on-site at the client's offices 2–3 days per week).
- Mission continuity: The mission may be extended for a maximum total duration, initial duration included, of 880 working days.
Application Questions (please address these in your application):
- Are you able to work on-site 2–3 times per week?
- Do you have experience in the public transport domain?
- Do you already have experience in the cybersecurity field?
- Have you already worked in a large company with more than 8,000 employees?
- Do you hold an ISO 27001 Fundamental certification?
- Do you hold a CIAM certification (from IMI)?
- Do you hold a CAMS certification (from IMI)?
Why Keystone Solutions (Consultancy Advantages):
- Consultancy nature of work: Operate on-site with clients as a Keystone Solutions consultant, backed by our experts, playbooks, and delivery governance.
- Dynamic projects: Solve diverse identity, access, and compliance challenges across varied client environments, with opportunities to rotate missions over time.
- Turbo-charged learning and development: Mentoring, knowledge-sharing communities, and support toward certifications (e.g., ISO 27001, IAM, RBAC/ABAC) to broaden your impact.
- Ambition skyrocketing within a consultancy framework: Accelerate your career through exposure to large-scale organizations, modern IGA/PAM stacks, and structured progression paths.
Our Values in Every Client Engagement:
- Excellence and craftsmanship in analysis, modeling, and documentation.
- Integrity and accountability in security, audit readiness, and stakeholder alignment.
- Partnership and empathy when bridging business and technical teams.
- Curiosity and continuous improvement to refine RBAC models and access controls.
- Ownership and measurable impact on compliance outcomes.
Role-Specific Impact as a Consultant:
- Apply your business analysis strength to standardize role modeling and access governance under NIS2.
- Translate business activities into enforceable controls within IGA, Bastion, PIM, and PAM tools.
- Drive audit-ready evidence for access recertifications and least privilege enforcement.
- Leverage multilingual collaboration (Dutch/French and English) in complex, large-scale environments.
If you are ready to tackle technical and strategic challenges in a dynamic consultancy environment, apply today .
