Information Security Incident Coordinator

Haskoning; Amersfoort; On-site; EUR 75,000 - 95,000; Full time

Job summary

Haskoning in the Netherlands seeks an Information Security Incident Coordinator to lead end-to-end response to cyber and information security incidents, ensuring timely, structured, and well-documented handling with clear communication, recovery and learning.

You will align incident response with IT operations and business continuity, coordinate across security, suppliers and stakeholders, drive post-incident reviews and reporting, and contribute to strengthening the organisation's cyber

Qualifications

• Completed relevant education in cyber security, IT, digital forensics or related field.
• Certifications such as GCIH, SC-200, GCIA, CISSP or equivalent are preferred.
• Good understanding of incident handling, escalation, crisis coordination and post-incident review.

Responsibilities

• Coordinate the end-to-end response to security incidents across security, IT, suppliers and business stakeholders.
• Ensure clear ownership, escalation, communication, documentation and decision-making during incidents.
• Align incident response with business continuity and crisis management processes.
• Improve detection & response procedures with improvement of playbooks and readiness measures.
• Drive post-incident reviews, lessons learned and follow-up actions.
• Report on incident trends, root causes and response effectiveness.
• Support testing and exercising of incident scenarios.
• Work closely with managed detection, IT operations and external providers to improve operational resilience.

Skills

Incident response

Dutch language

English language

Calm under pressure

Strong communication

Education

Cyber security / IT / digital forensics education

GCIH

SC-200

GCIA

CISSP or equivalent

Job description

What you will do as Information Security Incident Coordinator

As Information Security Incident Coordinator, you are responsible for coordinating the end-to-end response to cyber and information security incidents. You ensure that incidents are handled in a timely, structured and well-documented way. Clear communication, recovery and learning.

This function strengthens organisational resilience and ensures alignment between incident response, IT Operations and business continuity/crisis management processes.

Key responsibilities:

• Coordinate the end-to-end response to security incidents across security, IT, suppliers and business stakeholders.
• Ensure clear ownership, escalation, communication, documentation and decision-making during incidents.
• Align incident response with business continuity and crisis management processes.
• Improve detection & response procedures with improvement of playbooks and readiness measures.
• Drive post-incident reviews, lessons learned and follow-up actions.
• Report on incident trends, root causes and response effectiveness.
• Support testing and exercising of incident scenarios.
• Work closely with managed detection, IT operations and external providers to improve operational resilience.

Where you will work

At Haskoning, you will join an independent, employee-owned international consultancy that combines engineering, design, and consultancy services with software and technology. Our mission, "Enhancing Society Together", drives us to create a positive impact on the world.

We offer purpose-driven and challenging work in diverse international projects, leveraging our 140+ years of expertise. With over 6,800 employees in more than 25 countries, we work together to turn challenges into opportunities and make a real impact on society. We collaborate with leading clients in markets such as infrastructure, climate resilience, renewable energy, decarbonisation of industry, and sustainable mobility.

As our new Information Security Incident Coordinator, you will become part of the corporate group Digital & Workplace Solutions (DWS) in the Netherlands. DWS provides services to the internal organisation, enabling colleagues to serve their clients in the best possible way.

DWS’s activities are divided across three domains: Enterprise IT & Services, Real Estate & Facility, and Digital & AI. In addition, there is a separate team for information security. The structure of DWS was recently reorganised to allow the three domains to come into their own more effectively. As a result, several new roles have been created, including that of Information Security Incident Coordinator. This role will be part of the Information Security team, which we are building to strengthen cyber resilience, improve detection and response capability and provide stronger day-to-day security leadership across business and IT. A key part of this is increasing maturity in incident readiness, coordination, escalation and recovery.

What you bring

• Strong experience in incident response, security operations, SOC or cyber crisis coordination.
• Able to remain calm, structured and effective under pressure.
• Comfortable coordinating across multiple teams, suppliers and management layers.
• Strong communication skills in Dutch and English, both verbal and written.
• Practical, resilient and focused on continuous improvement.

Education and certifications

• Completed relevant education in cyber security, IT, digital forensics or related field.
• Certifications such as GCIH, SC-200, GCIA, CISSP or equivalent are preferred.
• Good understanding of incident handling, escalation, crisis coordination and post-incident review.

What you can expect from us

This is an opportunity to take a visible coordinating role in strengthening Haskoning’s cyber resilience. You will help build and mature the organisation’s incident response capability in a central, risk-based team.

At Haskoning, we believe that the well-being of our employees is essential to our shared success. We offer a comprehensive benefits package designed to support both your professional development and personal well-being.