Cybersecurity Process & Governance Specialist

TMC; Noord-Brabant; Hybrid; EUR 65,000 - 90,000; Full time

Job summary

TMC is seeking a Cyber Security Process & Capability Analyst to help develop, implement, and professionalize cybersecurity processes across an international high‑tech environment.

You will design, document, and improve processes, align them with governance, and translate policies into practical ways of working for projects, services, and operations. Hybrid work: 60% on-site / 40% remote.

Qualifications

• 3 to 5 years of relevant cybersecurity experience.
• Familiarity with ISO 27001, IEC 62443, NIS2, CRA, and ITIL.
• Bachelor’s or Master’s degree preferred.
• English proficiency at professional level.
• Experience in industrial/OT environments is an advantage.
• Relevant certifications in cybersecurity, compliance, or service management are welcome.

Responsibilities

• Design, document, and improve cybersecurity processes, procedures, workflows, playbooks, and runbooks.
• Ensure processes align with day-to-day operations and governance requirements.
• Support audits, compliance monitoring, maturity assessments, and new cybersecurity capabilities.
• Define KPIs and reporting structures, develop RACI matrices, templates, and guidelines, and contribute to training.
• Support operational security activities such as incident coordination, escalations, or vulnerability handling.
• Focus on creating clear, compliant, and effective processes rather than deep technical engineering.

Skills

Cybersecurity governance

Compliance

Process design

Documentation

Operationalization

Education

Bachelor's or Master’s degree

Job description

TMC is seeking a Cyber Security Process & Capability Analyst to help develop, implement, and professionalize cybersecurity processes across an international high‑tech environment.

You will design, document, and improve processes, align them with governance, and translate policies into practical ways of working for projects, services, and operations. Hybrid work: 60% on-site / 40% remote.