Cyber Governance & Risk Lead (CGRC) for IT & OT

Heerema; Netherlands; On-site; EUR 70,000 - 100,000; Full time

Benefits offered by this job

Strong compensation & benefits

Annual bonus tied to company performance

30 days off

Access to in-house gym

Modern office in Leiden

Job summary

Heerema is seeking an Information Security Officer (CGRC) to lead cybersecurity governance across IT and OT. This role involves defining policies, conducting risk assessments, and ensuring compliance with frameworks such as ISO and GDPR. The ideal candidate should have at least 5 years of experience in information security and relevant certifications. Heerema offers strong compensation, including bonuses and 30 days off, alongside a modern workplace in Leiden.

Qualifications

• 5+ years of experience in information security with GRC leadership.
• Hands-on experience with security frameworks and regulations.
• Strong understanding of audit practices and evidence management.

Responsibilities

• Lead cybersecurity governance across IT and OT.
• Define policies, standards, and manage risk assessments.
• Ensure compliance with regulations like ISO and GDPR.

Skills

Risk methodologies

Compliance

Information security

Strong communication skills

Education

HBO or WO degree

Relevant certifications (CISSP, CISM, ISO 27001)

Job description

Heerema is seeking an Information Security Officer (CGRC) to lead cybersecurity governance across IT and OT. This role involves defining policies, conducting risk assessments, and ensuring compliance with frameworks such as ISO and GDPR. The ideal candidate should have at least 5 years of experience in information security and relevant certifications. Heerema offers strong compensation, including bonuses and 30 days off, alongside a modern workplace in Leiden.