Cybersecurity Manager / CISO

Function

We're looking for a strategic consultant to join our client's team in addressing the growing challenges in cybersecurity. This role is key in shaping policies that ensure robust protection and management of digital risks across the organization. The ideal candidate will bring a combination of strategic insight and practical expertise to enhance the cybersecurity framework and culture.

Responsibilities

The successful candidate will be responsible for developing and implementing a comprehensive cybersecurity and information security policy across the organization. The role demands a sharp focus on governance, risk management, and awareness, including:

• Crafting and updating the cybersecurity policy into clear frameworks, standards, and guidelines.
• Systematically following cybersecurity maturity within the organization using recognized frameworks (such as NIST).
• Initiating and steering cybersecurity-related initiatives based on market insights, risk analyses, incidents, audits, and strategic priorities.
• Managing the risk management cycle encompassing identification, protection, prevention, response, and recovery from incidents.
• Overseeing incident response and crisis management frameworks for cybersecurity and information security incidents.
• Identifying and addressing organizational cyber risks while ensuring compliance and safeguarding reputation.
• Collaborating with ICT, legal services, and other departments around cybersecurity-related processes, particularly governance and risk management.
• Serving as the point of contact for internal and external audits concerning cybersecurity and risk management aspects within vendor and contract management.
• Providing clear reports and recommendations to the management regarding cyber risks and evolving priorities.

The Ideal Candidate

The right candidate will be a strategically-minded expert capable of translating complex cybersecurity issues into actionable policies and decisions. Qualifications include:

• A master's degree in a relevant field such as ICT or business management, or equivalent experience.
• Extensive knowledge of ICT risk management and cybersecurity, with a firm understanding of IT infrastructure, networks, and cloud/data environments.
• Experience with risk management within IT and digital ecosystems, including third-party and vendor risks.
• Deep understanding of cybersecurity and risk management frameworks (such as NIST) and their practical application in an organizational context.
• Familiarity with ICT service management and ITIL principles, especially as they relate to change and run processes.
• Knowledge of relevant legislation, including guiding principles of NIS2, with the ability to translate impacts into policy and governance.
• Strong analytical skills to assess risks, weigh options, and provide informed, substantiated advice to management and executives.
• Exceptional communication skills, both written and verbal, with the ability to facilitate collaboration and alignment across teams.

Language Requirements

• Fluent in Dutch (native or bilingual proficiency).
• Professional working proficiency in English.