Cybersecurity Counsel - NIS2/DORA Compliance, Amsterdam

Datenschutz cert; Amsterdam; On-site; EUR 90,000 - 120,000; Full time

Benefits offered by this job

Vibrant team in Amsterdam

Flat hierarchies

Professional development through培训 and

Healthy work-life balance

30+ days vacation

Diversity and inclusivity

Job summary

FIRST PRIVACY B.V. invites applications for the position of Cybersecurity Counsel (NIS2 / DORA / ISO 27001/ Cyber Resilience) in Amsterdam.

The role focuses on translating regulatory requirements into concrete technical and organizational measures for multinational clients and coordinating certification readiness projects across schemes such as ISO 27001, SOC 2, PCI DSS, and NHS DSPT. You will map controls across frameworks, support incident handling, and help clients prepare for incidents with

Qualifications

• At least three years of full-time information security or compliance experience.
• Hands-on work on NIS2 or ISO 27001 projects.
• Knowledge of DORA, the CRA and related frameworks (ISO 22301, ISO 27701, ISO 42001, NIST CSF).
• Ability to explain technical matters to lawyers and to engineers.

Responsibilities

• Translate NIS2, DORA, ISO 27001 and related requirements into concrete measures for multinational clients.
• Run certification readiness projects for ISO 27001 and other schemes (SOC 2, PCI DSS, NHS DSPT): gap assessments, risk analyses, implementation, audits, and coordination with certifiers.
• Map controls across frameworks to create a single evidence base for multiple schemes.
• Support incident handling: triage, log review, forensics basics, evidence preservation, breach analysis and notifications under GDPR, NIS2, DORA, CRA.
• Prepare clients for incidents: response plans, notification matrices, tabletop exercises and first responder training.
• Build and test business continuity and crisis management: BIA, ISO 22301-aligned plans, crisis playbooks and drills.
• Assess third-party cyber risk and supplier due diligence.
• Assist technology providers with regulatory readiness: scoping, maturity assessments, product security and contractual clauses.
• Collaborate with legal to advise on obligations, contracts and supply-chain requirements.
• Engage with clients from day one and work with an international team of counsels.
• Contribute to tech-enabled delivery: compliance platforms, AI-assisted drafting, self-assessment tools.
• Monitor EU/national cyber regulation developments and inform clients.

Skills

Information security

Regulatory compliance

English proficiency

Communication skills

Education

Master's degree in law

Degree in information security/IT/computer science

Job description

FIRST PRIVACY B.V. invites applications for the position of Cybersecurity Counsel (NIS2 / DORA / ISO 27001/ Cyber Resilience) in Amsterdam.

The role focuses on translating regulatory requirements into concrete technical and organizational measures for multinational clients and coordinating certification readiness projects across schemes such as ISO 27001, SOC 2, PCI DSS, and NHS DSPT. You will map controls across frameworks, support incident handling, and help clients prepare for incidents with