CyberSecurity Expert Dutch

We are seeking an experienced Information Security Manager to join our team. You will lead the development and maintenance of our ISMS and drive our journey towards ISO 27001 certification while ensuring compliance with relevant standards.

Key responsibilities

• Manage and continuously develop the Information Security Management System (ISMS), including policies, processes, documentation, and review cycles.

• Identify, analyze, and track cybersecurity risks, maintain the risk register, and report to governance bodies.

• Oversee compliance with ISO 27001, NIS2, CyberFundamentals and prepare for and conduct internal and external audits.

• Maintain the Incident Response Plan, coordinate security incidents and ensure proper follow-up and reporting.

• Contribute to business continuity and disaster recovery initiatives with a focus on security.

• Assess supplier and supply-chain risks, monitor security requirements of critical partners.

• Manage external security partners and monitor vulnerability, patch, monitoring, and IAM activities.

• Strengthen security awareness through training, sensitization and campaigns.

Required qualifications

• Master's degree in an ICT-related or business-oriented field (or equivalent experience).

• At least five years of demonstrable experience in information security, cybersecurity or ICT risk management.

• Deep knowledge of information security frameworks and standards such as ISO 27001, NIS2 and CyberFundamentals.

• Proven experience with risk management, audits, compliance and operating an ISMS.

• Strong analytical and communication skills, with ability to engage stakeholders at all organizational levels.

Nice to have

• Experience in the healthcare sector or handling sensitive personal data.

• Fluency in Dutch and strong English proficiency.

• Relevant certifications such as CISSP, CISM, ISO 27001 Lead Implementer or Lead Auditor.