Workplace Security Engineer

Security Officer Workplace Security & Data Leakage Protection The Role We are looking for an experienced Security Officer specialising in Workplace Security and Data Leakage Protection to strengthen the organisation’s information security capabilities. You will be responsible for ensuring that workplace devices, digital services, and collaboration platforms are adequately protected through effective security controls, policies, and processes.

Your scope will include endpoint security, secure authentication, email and web security, collaborative storage solutions, and Data Leakage Prevention (DLP). Working closely with security specialists, solution architects, IT teams, data governance, privacy, and business stakeholders, you will assess security risks, define improvement roadmaps, and ensure that security measures are effectively implemented and monitored.

This role combines hands-on security expertise, risk management, stakeholder engagement, and the ability to translate technical security requirements into practical business solutions.

Key Responsibilities

1. Security Oversight & Risk Management Act as the security subject-matter expert and primary point of contact for workplace security, endpoint protection, secure authentication, and Data Leakage Prevention. Oversee the security of endpoint devices, including Windows workstations, virtual desktop infrastructure (VDI), virtual machines, and mobile devices. Ensure the secure configuration of workplace services, including email, web access, and collaborative storage platforms such as NAS and SharePoint. Assess and monitor the maturity and effectiveness of security controls and processes, using recognised frameworks such as ISO 27001. Maintain security risk assessments and heatmaps, providing clear visibility of vulnerabilities, control gaps, and areas requiring remediation. Define security strategies and ensure that risks within your area of responsibility are managed in line with the organisation’s risk appetite. Prepare and present security assessments, risk reports, roadmaps, and recommendations to technical teams, business stakeholders, management, and internal or external auditors.
2. Security Strategy & Continuous Improvement Define and maintain a security improvement roadmap based on identified risks, control gaps, regulatory requirements, and evolving business needs. Contribute to the implementation and continuous improvement of workplace security and data protection controls. Represent the security function in IT, security, and business projects that may impact workplace environments or information protection. Define security requirements, review proposed solutions, and validate implementations to ensure security is incorporated throughout the project lifecycle. Develop and monitor remediation action plans, ensuring identified weaknesses are addressed and sustainable Business-as-Usual (BAU) processes are established. Work with operational teams to define appropriate security metrics and indicators to monitor the effectiveness of implemented controls. Collaborate with relevant internal teams and external technology providers to support the evolution of security solutions and services.
3. Data Leakage Prevention Support the definition and implementation of Data Leakage Prevention policies, controls, and procedures. Contribute to data classification, information protection, encryption, and retention initiatives. Assess and improve preventive and detective controls designed to reduce the risk of sensitive information being lost, exposed, or shared inappropriately. Support the configuration and optimisation of data protection technologies, including Microsoft Information Protection and related security capabilities. Work with data governance and privacy stakeholders to align security controls with information-handling requirements and applicable data protection obligations. Candidate Profile Education & Experience Bachelor’s or Master’s degree in Computer Science, Information Systems, Information Security, or a related discipline, or equivalent professional experience. At least 5 years of relevant experience in workplace and endpoint security, covering devices, digital workplace services, and information protection. Strong understanding of endpoint security practices, including workstation hardening, encryption, vulnerability management, anti-malware, phishing protection, and secure device configuration. Experience securing workplace services such as email, web access, and collaborative storage platforms, including NAS and SharePoint. Practical knowledge of Data Leakage Prevention, including data classification, information protection policies, and preventive and detective controls, is a strong advantage. Experience defining security requirements and managing remediation plans through to implementation, operational handover, and ongoing effectiveness monitoring. Understanding of security risk management, including risk assessments, remediation, and risk acceptance. Desirable Skills & Knowledge Experience with Identity and Access Management (IAM). Knowledge of Microsoft Information Protection, data classification, encryption, and related data security technologies. Familiarity with ISO 27001/ISO 27002, the NIST Cybersecurity Framework, and NIS2 considerations. Understanding of data governance, privacy principles, and GDPR requirements. Ability to analyse security data using scripts, advanced Excel techniques, automation, or AI-supported tools. Experience working in complex enterprise IT environments with multiple technical and business stakeholders. Personal Skills Strong analytical and problem-solving capabilities, with a structured and risk-based approach. Excellent organisational skills and the ability to work independently while collaborating effectively with a wider team. Strong stakeholder management skills and the ability to build trusted relationships across IT, security, data, privacy, and business functions. Confident communicator, capable of presenting security risks, roadmaps, and technical recommendations to both technical and non-technical audiences. Ability to influence and negotiate with stakeholders to promote secure-by-design practices while balancing business priorities. Fluent in spoken and written English. Knowledge of French and/or Dutch is an advantage. Working Arrangements Location: Brussels, Belgium. Working arrangements and on-site expectations to be confirmed.