Cyber Security Process Analyst

TMC; Noord-Brabant; Hybrid; EUR 65,000 - 90,000; Full time

Job summary

TMC is seeking a Cyber Security Process & Capability Analyst to help develop, implement, and professionalize cybersecurity processes across an international high‑tech environment.

You will design, document, and improve processes, align them with governance, and translate policies into practical ways of working for projects, services, and operations. Hybrid work: 60% on-site / 40% remote.

Qualifications

• 3 to 5 years of relevant cybersecurity experience.
• Familiarity with ISO 27001, IEC 62443, NIS2, CRA, and ITIL.
• Bachelor’s or Master’s degree preferred.
• English proficiency at professional level.
• Experience in industrial/OT environments is an advantage.
• Relevant certifications in cybersecurity, compliance, or service management are welcome.

Responsibilities

• Design, document, and improve cybersecurity processes, procedures, workflows, playbooks, and runbooks.
• Ensure processes align with day-to-day operations and governance requirements.
• Support audits, compliance monitoring, maturity assessments, and new cybersecurity capabilities.
• Define KPIs and reporting structures, develop RACI matrices, templates, and guidelines, and contribute to training.
• Support operational security activities such as incident coordination, escalations, or vulnerability handling.
• Focus on creating clear, compliant, and effective processes rather than deep technical engineering.

Skills

Cybersecurity governance

Compliance

Process design

Documentation

Operationalization

Education

Bachelor's or Master’s degree

Job description

Do you have experience with cybersecurity governance, compliance, and process improvement? For an international high-tech environment, we are looking for a Cyber Security Process & Capability Analyst who will help further develop, implement, and professionalize cybersecurity processes.

In this role, you combine process ownership, governance, and operational understanding. You translate security policies, laws and regulations, and relevant standards into practical ways of working that can be effectively applied across projects, services, and operations.

What will you do?

You will be responsible for designing, documenting, and improving cybersecurity processes, procedures, workflows, playbooks, and runbooks. You ensure that these processes are aligned with day-to-day operations as well as relevant compliance and governance requirements.

You will work closely with security specialists, project and service teams, Legal, and other stakeholders. You will support process implementations, audits, compliance monitoring, maturity assessments, and the introduction of new cybersecurity capabilities.

You will also define KPIs and reporting structures, develop RACI matrices, templates, and guidelines, and contribute to knowledge transfer and training.

Where needed, you will support operational security activities, for example around incident coordination, escalations, or vulnerability handling.

The emphasis of this role is not on deep technical cybersecurity engineering, but on creating clear, compliant, and effective processes.

What do you bring?

• You have around 3 to 5 years of relevant experience in cybersecurity, governance, compliance, service management, or a related field. You have proven experience in process design, documentation, and operationalization, and you are able to translate complex security and compliance requirements into practical processes.
• You are familiar with standards and frameworks such as ISO 27001, IEC 62443, NIS2, CRA, and ITIL, and you have strong analytic, organizational, and communication skills.
• A relevant Bachelor’s or Master’s degree is preferred.
• Good command of English at a professional level is required.
• Experience in industrial, critical infrastructure, or OT-related environments is a strong advantage.
• Relevant certifications in cybersecurity, compliance, or service management are also welcome.

Who are you?

You work in a structured and accurate way, while remaining pragmatic and flexible. You can work independently, communicate easily with both technical and non-technical stakeholders, and enjoy helping to professionalize processes in a dynamic environment.

Practical information

Hybrid working: approximately 60% on-site / 40% remote