Cybersecurity Expert

As a Cybersecurity Expert, you take on a central role in the further development, implementation, and follow-up of cybersecurity and information security within the client. You ensure that risks are managed, security requirements are safeguarded, and the organization continues to grow in maturity.

Specifically, this entails, among other things, that you:

• Manages and further develops the Information Security Management System (ISMS), including policies, processes, procedures, documentation, and review cycles, and helps lead the journey towards ISO 27001 certification
• Identifies, analyzes, and follows up on cybersecurity risks, manages the risk register, and reports periodically to the relevant consultative bodies
• Oversees compliance with relevant standards and regulations, including ISO 27001, NIS2, and CyberFundamentals (CyFun), and prepares and conducts audits
• Manages the Statement of Applicability and audit documentation and ensures that client remains audit-ready
• Maintains the Incident Response Plan, coordinates security incidents, and helps ensure the correct follow-up of reporting obligations and improvement actions
• Contributes to business continuity and disaster recovery initiatives, with particular attention to the security aspects thereof
• Assesses supplier and supply chain risks and monitors compliance with security requirements at critical partners
• Manages external security partners and monitors the follow-up of, among other things, vulnerability management, patch management, monitoring, and identity & access management
• Strengthens security awareness within the client through sensitization, training, and awareness campaigns
• Supports management and the board with clear reporting on KPIs, risks, incidents, and the progress of cybersecurity initiatives

PROFILE

We are looking for an experienced cybersecurity expert who feels at home in a rapidly evolving organization. You combine strong substantive expertise with a pragmatic approach and thrive on developing and embedding cybersecurity within a complex organizational context.

You recognize yourself in the following profile:

• You hold a Master's degree, preferably in an ICT-related or business-oriented field, or are equivalent through relevant experience.
• You have at least five years of demonstrable experience in information security, cybersecurity, or ICT risk management.
• You possess a thorough knowledge of information security frameworks and standards such as ISO 27001, NIS2, and CyberFundamentals (CyFun).
• You have experience with risk management, audits, compliance, and setting up or managing an ISMS.
• You understand the operation of modern IT environments, including infrastructure, cloud, identity, and security services.
• You have insight into security operations, vulnerability management, supplier management, and incident management.
• Certifications such as CISSP, CISM, ISO 27001 Lead Implementer or ISO 27001 Lead Auditor are a strong draw.
• You have strong analytical skills, work in a structured manner, and can translate complex issues into feasible actions and advice.
• You know how to engage stakeholders at various levels and can easily switch between operational teams, management, and the executive board.
• Experience within the healthcare sector or with the protection of sensitive personal data is a plus.
• You communicate fluently in Dutch and have a good knowledge of English.