Cyber Attack Surface Lead — Hybrid, Data‑Driven Security

Enexis Groep B.V.; 's-Hertogenbosch; Hybrid; EUR 63,656 - 90,942; Full time

Benefits offered by this job

Hybrid work environment

Home office setup via company

Net home-working allowance €2.45/day

Laptop or tablet and phone

Mobility card and travel allowance

Pension (ABP) 70% contribution

Job summary

Enexis Groep B.V. is seeking a CASM Lead to drive a central team that maps, monitors and reduces the attack surface across IT and OT.

You will define the CASM vision, establish processes and tooling, and build a data-driven capability that unifies our digital resilience. You will lead a virtual team, ensure asset discovery and CMDB integration, and build a central analytics platform for risk models and reporting.

Qualifications

• Bachelor's or master's degree in Cyber Security, Computer Science, Electrical Engineering or a related field.
• Proven experience in security in both OT and IT environments, preferably in industrial or critical infrastructure context.
• In-depth knowledge of vulnerability management, OT security concepts and of setting up or leading security teams or processes.

Responsibilities

• Develop and continuously refine the CASM strategy, vision, processes and multi-year roadmap.
• Lead a virtual, multidisciplinary team of IT and OT CASM analysts, including coaching and team development.
• Set up asset discovery (cloud, network, endpoints, IT-for-OT, OT) and integration with CMDB and scanners.
• Build a central data/analytics platform for scanner data, KPIs, reporting and risk models.
• Translate technical vulnerabilities into concrete business risks and drive risk-based prioritisation.
• Enable OT-safe discovery and scanning and embed OT-specific hardening and configuration controls.
• Together with other teams, define scope and requirements for specialist testing such as penetration tests and red teaming.

Skills

IT security

OT security

Vulnerability management

Team leadership

Stakeholder management

Education

Bachelor's or Master’s degree in Cyber Security/CS/EE

Tools

CMDB

Vulnerability scanners

Job description

Enexis Groep B.V. is seeking a CASM Lead to drive a central team that maps, monitors and reduces the attack surface across IT and OT.

You will define the CASM vision, establish processes and tooling, and build a data-driven capability that unifies our digital resilience. You will lead a virtual team, ensure asset discovery and CMDB integration, and build a central analytics platform for risk models and reporting.