About the mission
We are looking for an experienced Information Security Manager to enhance our cybersecurity governance, risk management, and compliance efforts. The role involves strategic advising and implementation of security initiatives in collaboration with business and IT stakeholders.
Read the full description
Overview
Our organization is looking for an experienced Information Security Manager to support the organization in further developing and strengthening its cybersecurity governance, risk management, and compliance efforts. The consultant acts as a strategic advisor and guides the implementation of security initiatives, policy frameworks, and improvement trajectories in line with applicable standards and regulations. Close collaboration with both business and IT stakeholders is essential to achieve a forward-looking and risk-driven cybersecurity approach.Key Responsibilities
Proven experience as a Security Consultant in one of the following environments: data, infrastructure, applications, ...
Proven expertise in a specific domain of information security (e.g., implementing information security management processes, conducting vulnerability assessments and penetration tests, optimizing application security through cost-effective means, implementing Privileged Access Management, implementing encryption solutions)
Proven experience in analyzing, optimizing, and documenting security processes and governance
Proven experience with security management techniques and frameworks (e.g., ISO27000 series, COBIT for Security, NIST, OWASP, CIS Critical Security Controls for Effective Cyber Defense)
Proven knowledge and experience through certifications depending on the domain of expertise (e.g., CISM, CISSP, CEH).
Skills & Experience
Proven experience as a CISO
Proven experience as a Security Consultant in one of the following environments: data, infrastructure, applications, ...
Proven experience in the public sector
Proven experience in analyzing, optimizing, and documenting security processes and governance
Proven experience in establishing and improving security governance, risk management, and compliance processes.
Proven experience in conducting cybersecurity maturity assessments and developing strategic improvement roadmaps
Proven experience with ISO 27001-based security management systems (ISMS)
Proven experience with NIS2 implementation or NIS2 compliance programs.
Proven expertise in a specific domain of information security
Proven experience with Governance, Risk & Compliance (GRC).
Proven experience with the NIST Cyber Security Framework.
Proven experience in strategic advising at executive and management levels
Proven experience with security management techniques and frameworks (e.g., ISO27000 series, COBIT for Security, NIST, OWASP, CIS Critical Security Controls for Effective Cyber Defense)
Proven knowledge and experience through certifications depending on the domain of expertise (e.g., CISM, CISSP, CEH).
Holding a CISSP certification.
Proven background as a security architect
Languages
Language requirement: Native level in Dutch at European CEFR level C2.
Additional Info
Number requested: 1
Preferred start date: 29/06/2026
Preferred end date: 15/07/2027
Assignment type: Framework contract 2022 - 2027 (Lot 1)
Currency: EUR
Working hours: 2250
Employment percentage: 100
Home working possible: Yes
Candidate weighting: 50% quality - 50% price
What you'll do
- Aantoonbare ervaring als Security Consultant binnen één van volgende omgevingen: data, infrastructuur, applicaties, ...
- Aantoonbare expertise in specifiek kennisdomein van information security (bv. implementeren van information security management processen, uitvoeren van kwetsbaarheidsanalyses en pentesten, optimaliseren van applicatiebeveiliging middels cost-effectieve middelen, implementeren van Priviliged Access Management, implementeren van encryptieoplossingen)
- Aantoonbare ervaring in het analyseren, optimaliseren en documenteren van security processen en governance
- Aantoonbare ervaring van security beheer technieken en of raamwerken (bv: ISO27000 series, COBIT for Security, NIST, OWASP, CIS Critical Security Controls for Effective Cyber Defense)
- Aantoonbare kennis en ervaring via certificaten afhankelijk van domein van expertise (bv CISM, CISSP, CEH).
What we're looking for
- Aantoonbare ervaring als Security Consultant binnen één van volgende omgevingen: data, infrastructuur, applicaties, ...
- Aantoonbare expertise in specifiek kennisdomein van information security (bv. implementeren van information security management processen, uitvoeren van kwetsbaarheidsanalyses en pentesten, optimaliseren van applicatiebeveiliging middels cost-effectieve middelen, implementeren van Priviliged Access Management, implementeren van encryptieoplossingen)
- Aantoonbare ervaring in het analyseren, optimaliseren en documenteren van security processen en governance
- Aantoonbare ervaring van security beheer technieken en of raamwerken (bv: ISO27000 series, COBIT for Security, NIST, OWASP, CIS Critical Security Controls for Effective Cyber Defense)
- Aantoonbare kennis en ervaring via certificaten afhankelijk van domein van expertise (bv CISM, CISSP, CEH).
- Aantoonbare ervaring met Governance, Risk & Compliance (GRC).
- Aantoonbare ervaring met het NIST Cyber Security Framework.
- Aantoonbare ervaring met strategische advisering van directie- en managementniveaus
- Aantoonbare ervaring van security beheer technieken en of raamwerken (bv: ISO27000 series, COBIT for Security, NIST, OWASP, CIS Critical Security Controls for Effective Cyber Defense)
- Aantoonbare kennis en ervaring via certificaten afhankelijk van domein van expertise (bv CISM, CISSP, CEH).
- Beschikken over een CISSP-certificering.
- Aantoonbare achtergrond als security architect
Skills
- Security Consultant Experience
- Information Security Expertise
- Experience in Public Sector
- Security Process Optimization
- Security Governance and Compliance
- Cybersecurity Maturity Assessments
- ISO 27001 Experience
- NIS2 Implementation Experience
- Governance, Risk & Compliance Experience
- NIST Cyber Security Framework Experience
- Strategic Advising Experience
- Security Management Frameworks Experience
- CISSP Certification
- Security Architect Background