Information Security Business Advisor (BISO)

Agsweltgermany; Amersfoort; Hybrid; EUR 70,000 - 110,000; Full time

Job summary

Royal HaskoningDHV is seeking an Information Security Business Advisor (BISO) for a hybrid role in Amersfoort, Netherlands. You will bridge the central Information Security team with business lines, helping managers make risk-aware decisions while applying information security practically.

You will advise on information security risks, priorities, and controls, translate policies into guidelines, and participate early in projects and supplier selections.

Qualifications

• Bachelor’s or master’s degree in information security, IT, governance, risk management, or related field.
• More than 4 years of experience as a BISO, Information Security Advisor, Cyber Risk Advisor, or similar.
• Strong knowledge of governance, risk management, vendor security, and stakeholder management.
• Strong Dutch and English communication skills.

Responsibilities

• Advise Business Lines on information security risks, priorities, and controls.
• Translate central security policies and standards into practical guidelines.
• Be involved early in projects, supplier selections, and change initiatives.
• Support risk assessments and prioritise security improvements and investments.
• Build relationships with managers and specialists; increase security awareness.

Skills

BISO

Information security

Risk management

Vendor security

Stakeholder management

Security governance

Communication skills

Dutch language

English language

Education

Bachelor's degree

Master's degree

Job description

Information Security Business Advisor (BISO)

Netherlands, Amersfoort Royal HaskoningDHV

Job Description

Royal HaskoningDHV is looking for an Information Security Business Advisor (BISO) for a hybrid position in Amersfoort, Netherlands. The role connects the central Information Security team with the business lines and focuses on helping managers and teams make risk-aware decisions while applying information security in a practical and risk-based way.

The BISO will advise Business Lines on information security risks, priorities, and appropriate controls, translate central security policies and standards into practical guidelines, and become involved early in projects, supplier selections, and change initiatives. The role also includes supporting risk assessments, prioritizing security improvements and investments, building relationships with managers and specialists, and increasing security awareness across the organization.

Candidates should have a completed bachelor’s or master’s degree in information security, IT, business administration, governance, risk management, or a similar field. More than 4 years of experience in a BISO, Information Security Advisor, Cyber Risk Advisor, or similar business-oriented security role is required, along with strong knowledge of security governance, risk management, vendor security, and stakeholder management. Strong communication skills in Dutch and English are required, while certifications such as CISSP, CISM, CRISC, or ISO 27001 are a plus.

Requirements

• Completed bachelor's or master's degree in information security, IT, business administration, governance, risk management, or a similar field
• More than 4 years of experience as a BISO, Information Security Advisor, Cyber Risk Advisor, or in a similar business-oriented security role
• Excellent knowledge of security governance
• Excellent knowledge of risk management
• Excellent knowledge of vendor security
• Excellent knowledge of stakeholder management
• Strong communication skills in Dutch
• Strong communication skills in English
• Certifications such as CISSP, CISM, CRISC, ISO 27001, or similar are a plus
• Curious and collaborative approach
• Ability to make complex topics accessible to a broad audience
• Ability to provide constructive advice
• Ability to work with diverse stakeholders and interests