Cyber Attack Surface Management Lead

Enexis Groep B.V.; Weert; On-site; EUR 63,656 - 90,942; Full time

Benefits offered by this job

Hybrid work

Home office set-up

Net home-working allowance

ABP pension (70% of premium)

Vitality budget €700

Travel allowance

Laptop or tablet

Mobility card for public transport

Job summary

Enexis Groep B.V. is seeking a CASM Lead to act as a player-coach for a central team that maps, monitors and reduces Enexis’s attack surface. You will define the CASM vision, set up processes, and build a data-driven capability integrating IT and OT landscapes.

You will lead a virtual team, set up asset discovery and CMDB integration, and build a central analytics platform to support risk-based prioritisation and governance. Hybrid work with main location in Weert.

Qualifications

• Bachelor’s or master’s degree in Cyber Security, Computer Science, Electrical Engineering or related field.
• Proven experience in security in both OT and IT environments, preferably in an industrial or critical infrastructure context.
• In-depth knowledge of vulnerability management, OT security concepts and leading security teams or processes.

Responsibilities

• Develop and refine the CASM strategy, vision, processes and multi-year roadmap.
• Lead a virtual, multidisciplinary team of IT and OT CASM analysts, including coaching and team development.
• Set up asset discovery (cloud, network, endpoints, IT-for-OT, OT) and integration with CMDB and scanners.
• Build a central data/analytics platform for scanner data, KPIs, reporting and risk models.
• Translate technical vulnerabilities into concrete business risks and drive risk-based prioritisation.
• Enable OT-safe discovery and scanning and embed OT-specific hardening and configuration controls.
• Define scope and requirements for specialist testing such as penetration tests and red teaming.

Skills

IT security

OT security

Vulnerability management

Coaching

Stakeholder management

Education

Bachelor/Master in Cyber Security / Computer Science / Electrical Engineering

Job description

You build the team that keeps our digital energy network secure

What are you going to do?

How you take on this challenge

As CASM Lead, you are the “player‑coach” of a new central team that maps, monitors and helps reduce Enexis’s attack surface. You define the CASM vision, set up processes and tooling, and build a data‑driven capability that brings our IT and OT landscapes together. You establish a central analytics environment, ensure asset discovery and integration with the CMDB, and make sure vulnerabilities flow into a uniform triage process. You work closely with SOC teams, security architects and system owners, so that CASM is not an island but a core part of our digital resilience.

Your responsibilities

• Develop and continuously refine the CASM strategy, vision, processes and multi‑year roadmap.
• Lead a virtual, multidisciplinary team of IT and OT CASM analysts, including coaching and team development.
• Set up asset discovery (cloud, network, endpoints, IT‑for‑OT, OT) and integration with CMDB and scanners.
• Build a central data/analytics platform for scanner data, KPIs, reporting and risk models.
• Translate technical vulnerabilities into concrete business risks and drive risk‑based prioritisation.
• Enable OT‑safe discovery and scanning and embed OT‑specific hardening and configuration controls.
• Together with other teams, define scope and requirements for specialist testing such as penetration tests and red teaming.

Job requirements

How you approach it

You combine deep IT and OT security expertise with strategic insight and natural coaching skills. You are comfortable in a complex environment with many stakeholders and know how to bring people along in a new way of working. You switch easily between technical detail and executive‑level messaging: from attack path analysis to clear management reports. You keep overview, structure complex issues and make them manageable for your team, so you can work towards visible improvements together.

You also bring

• A completed bachelor’s or master’s degree in, for example, Cyber Security, Computer Science, Electrical Engineering or a related field.
• Proven experience in security in both OT and IT environments, preferably in an industrial or critical infrastructure context.
• In‑depth knowledge of vulnerability management, OT security concepts and of setting up or leading security teams or processes.

Team & culture

You’ll tackle this with…

Your colleagues in the Digital Resilience Center. You work closely with SOC Leads, security architects and specialists from the IT and OT SOC. Together you build an integrated, risk‑driven view of our digital resilience. The atmosphere is professional but no‑nonsense: plenty of responsibility, short lines and room to experiment with new ideas. Your main location is Weert (around two days per week); you also work hybrid and regularly visit Zwolle or Den Bosch for meetings with stakeholders.

What do you get from us?

And we invest energy in you too

At Enexis, you work at the forefront of one of the biggest challenges of our time: the energy transition.

• Salary between € 5,704 and € 8,149 gross per month (based on a 40‑hour working week).
• Including secondary benefits, your total package can grow to € 10,488 gross per month. On top of your base salary, you receive 28.7% in flexible benefits (8% holiday allowance, a 13th month of 10.7% and a personal budget of 10%). You can choose to have this paid out whenever you like, or use it to buy extra days off.
• 24.5 days of holiday per year with a full‑time contract. Need more time to recharge? With your personal budget and 13th month you can buy up to 35.5 extra days off per year.
• Opportunities to work hybrid, including a home office set‑up arranged by us and a net home‑working allowance of € 2.45 per day.
• A 70% contribution to your ABP Choice Pension: Enexis pays two‑thirds of the premium, you contribute one‑third.
• A vitality budget of € 700 gross per year, which you can use for your sports subscription, your hobby or to make your home more sustainable. You can also save this up to € 2,100 for study costs or to pay off your student loan.
• Plenty of room to grow through our internal development platform and/or external courses and trainings. Whether you want to move up, switch careers or further develop your skills, we encourage you to get the best out of yourself.
• A laptop or tablet and phone that you can also use outside working hours.
• A mobility card for first‑class public transport travel and a travel allowance.