Cyber Governance & Risk Lead

Heerema Marine Contractors; Netherlands; Remote; EUR 90,000 - 130,000; Full time

Benefits offered by this job

Annual bonus

Pension plan

30 days leave

Gym access

Office Leiden

Job summary

Heerema Marine Contractors seeks an Information Security Officer (CGRC) to lead governance across IT and OT, defining policies and standards, driving risk assessments, and ensuring compliance with ISO, NIS2, and GDPR. You will embed security controls into daily operations and projects.

You will build a governance framework, map requirements to external frameworks, coordinate audits, and report on CGRC KPIs while working with IT, OT, Legal, Compliance, Quality, HR and business stakeholders.

Qualifications

• 5+ years of experience in information security, risk, or compliance with GRC leadership across IT/OT
• Hands-on experience with security frameworks and privacy/EU directives such as GDPR, NIS2, and IMO cybersecurity requirements
• Strong communication skills to translate between technical and non-technical audiences in English and Dutch

Responsibilities

• Define and embed cybersecurity governance across IT and OT
• Establish CGRC roles and responsibilities (RACI)
• Plan, execute, and maintain cybersecurity risk assessments
• Map security requirements to ISO/NIST/IEC and GDPR/NIS2/IMO
• Coordinate audits and manage remediation
• Define CGRC KPIs, maturity metrics, dashboards, and reporting
• Deliver role-based cybersecurity awareness and training
• Lead incident governance and regulatory reporting
• Collaborate with IT, OT, Legal, Compliance, Quality, HR and external stakeholders

Skills

Information security

GRC leadership

Risk assessment

Auditing

ISO 27001 knowledge

NIS2/GDPR knowledge

Education

HBO/WO degree

Relevant certifications (CISSP/CISM/ISO 27001 Lead Implementer/Auditor/IEC 62443)

Tools

ISO/IEC 27001/2

NIST CSF/800-53

IEC 62443

GDPR compliance

Job description

Heerema Marine Contractors seeks an Information Security Officer (CGRC) to lead governance across IT and OT, defining policies and standards, driving risk assessments, and ensuring compliance with ISO, NIS2, and GDPR. You will embed security controls into daily operations and projects.

You will build a governance framework, map requirements to external frameworks, coordinate audits, and report on CGRC KPIs while working with IT, OT, Legal, Compliance, Quality, HR and business stakeholders.