Cyber Attack Surface Management Lead

Enexis Groep B.V.; Zwolle; On-site; EUR 54,561 - 90,942; Full time

Job summary

Enexis Groep B.V. seeks a CASM Lead to act as a player‑coach for a central IT/OT CASM team. You will define the CASM vision, set up processes and tooling, and build a data‑driven capability connecting IT and OT landscapes.

You will establish a central analytics environment and drive risk‑based prioritisation across the organisation. You will lead asset discovery, CMDB integration, and collaboration with SOC teams, security architects and system owners to embed CASM as a core part of digital

Qualifications

• Bachelor or Master degree in Cyber Security, Computer Science, Electrical Engineering or related field.
• Proven experience in security for IT and OT environments, preferably in industrial/critical infrastructure.
• In-depth knowledge of vulnerability management and setting up or leading security teams or processes.

Responsibilities

• Develop and refine the CASM strategy, vision, processes and multi-year roadmap.
• Lead a virtual, multidisciplinary IT/OT CASM team, including coaching and development.
• Set up asset discovery and CMDB integration (cloud, network, endpoints, IT-for-OT, OT).
• Build a central data/analytics platform for scanner data, KPIs, reporting and risk models.
• Translate vulnerabilities into business risks and drive risk-based prioritisation.
• Enable OT-safe discovery and scanning and embed OT hardening and controls.
• Define scope and requirements for penetration tests and red teaming with other teams.

Skills

IT security

OT security

Security leadership

Coaching skills

Stakeholder management

Education

Bachelor or Master in Cyber Security / Computer Science / Electrical Engineering

Tools

CMDB integration

Vulnerability scanners

Security analytics platform

Job description

You build the team that keeps our digital energy network secure

What are you going to do?

How you take on this challenge

As CASM Lead, you are the “player‑coach” of a new central team that maps, monitors and helps reduce Enexis’s attack surface. You define the CASM vision, set up processes and tooling, and build a data‑driven capability that brings our IT and OT landscapes together. You establish a central analytics environment, ensure asset discovery and integration with the CMDB, and make sure vulnerabilities flow into a uniform triage process. You work closely with SOC teams, security architects and system owners, so that CASM is not an island but a core part of our digital resilience.

Your responsibilities

• Develop and continuously refine the CASM strategy, vision, processes and multi‑year roadmap.
• Lead a virtual, multidisciplinary team of IT and OT CASM analysts, including coaching and team development.
• Set up asset discovery (cloud, network, endpoints, IT‑for‑OT, OT) and integration with CMDB and scanners.
• Build a central data/analytics platform for scanner data, KPIs, reporting and risk models.
• Translate technical vulnerabilities into concrete business risks and drive risk‑based prioritisation.
• Enable OT‑safe discovery and scanning and embed OT‑specific hardening and configuration controls.
• Together with other teams, define scope and requirements for specialist testing such as penetration tests and red teaming.

Job requirements

How you approach it

You combine deep IT and OT security expertise with strategic insight and natural coaching skills. You are comfortable in a complex environment with many stakeholders and know how to bring people along in a new way of working. You switch easily between technical detail and executive‑level messaging: from attack path analysis to clear management reports. You keep overview, structure complex issues and make them manageable for your team, so you can work towards visible improvements together.

You also bring

• A completed bachelor’s or master’s degree in, for example, Cyber Security, Computer Science, Electrical Engineering or a related field.
• Proven experience in security in both OT and IT environments, preferably in an industrial or critical infrastructure context.
• In‑depth knowledge of vulnerability management, OT security concepts and of setting up or leading security teams or processes.

Team & culture

You’ll tackle this with…

Your colleagues in the Digital Resilience Center. You work closely with SOC Leads, security architects and specialists from the IT and OT SOC. Together you build an integrated, risk‑driven view of our digital resilience. The atmosphere is professional but no‑nonsense: plenty of responsibility, short lines and room to experiment with new ideas. Your main location is Weert (around two days per week); you also work hybrid and regularly visit Zwolle or Den Bosch for meetings with stakeholders.

What do you get from us?

And we invest energy in you too

At Enexis, you work at the forefront of one of the biggest challenges of our time: the energy transition.

• Salary between € 5,704 and € 8,149 gross per month (based on a 40‑hour working week).
• Including secondary benefits, your total package can grow to € 10,488 gross per month. On top of your base salary, you receive 28.7% in flexible benefits (8% holiday allowance, a 13th month of 10.7% and a personal budget of 10%). You can choose to have this paid out whenever you like, or use it to buy extra days off.
• 24.5 days of holiday per year with a full‑time contract. Need more time to recharge? With your personal budget and 13th month you can buy up to 35.5 extra days off per year.
• Opportunities to work hybrid, including a home office set‑up arranged by us and a net home‑working allowance of € 2.45 per day.
• A 70% contribution to your ABP Choice Pension: Enexis pays two‑thirds of the premium, you contribute one‑third.
• A vitality budget of € 700 gross per year, which you can use for your sports subscription, your hobby or to make your home more sustainable. You can also save this up to € 2,100 for study costs or to pay off your student loan.
• Plenty of room to grow through our internal development platform and/or external courses and trainings. Whether you want to move up, switch careers or further develop your skills, we encourage you to get the best out of yourself.
• A laptop or tablet and phone that you can also use outside working hours.
• A mobility card for first‑class public transport travel and a travel allowance.