Information Security Manager – Amersfoort, Netherlands

Agsweltgermany; Amersfoort; À distance; EUR 110 000 - 140 000; Plein temps

Résumé du poste

Royal HaskoningDHV is seeking an experienced Information Security Manager to strengthen its information security maturity for the Amersfoort, Netherlands, operation. The role combines strategic leadership with hands-on execution and involves building a new central security function and team.

The Information Security Manager will develop and implement the information security strategy, roadmap, and improvement plans, while establishing governance, policies, standards, and controls based on a

Qualifications

• Completed higher professional or university degree in cyber security, IT, information security, risk management, or a similar field
• More than 10 years of experience in a senior management role within cyber security, information security, or technology risk
• Demonstrable experience building or transforming a security organization within a complex environment
• Certifications such as CISSP, CISM, CRISC, ISO 27001 Lead Implementer, ISO 27001 Lead Auditor, or similar
• Excellent command of Dutch, spoken and written; Excellent command of English, spoken and written

Responsabilités

• Strengthen information security maturity across the organization
• Build and coach a professional security team
• Develop and implement the information security strategy and roadmap
• Advise the Board and senior management on cyber risks and investment priorities

Connaissances

Governance

Cyber resilience

Third-party security

Incident management

Control frameworks

Executive liaison

Security strategy

Leadership

Dutch proficiency

English proficiency

Formation

CISSP

CISM

CRISC

ISO 27001 Lead Implementer

ISO 27001 Lead Auditor

Description du poste

Information Security Manager – Amersfoort, Netherlands

Netherlands, Amersfoort Royal HaskoningDHV

Job Description

Royal HaskoningDHV is looking for an experienced Information Security Manager to strengthen the information security maturity of its international organization in Amersfoort, Netherlands. The role combines strategic leadership with hands‑on execution and involves building a new central security function and team.

The Information Security Manager will develop and implement the information security strategy, roadmap, and improvement plans, while establishing governance, policies, standards, and controls based on a pragmatic NIST approach. The position also involves translating security risks into clear business and IT decisions, building and coaching a professional security team, and advising the Board of Directors and senior management on cyber risks, resilience, and investment priorities.

Candidates should have a completed higher professional or university degree in cyber security, IT, information security, risk management, or a similar field, along with more than 10 years of experience in a senior management role within cybersecurity, information security, or technology risk. Demonstrable experience building or transforming a security organization is required. Certifications such as CISSP, CISM, CRISC, ISO 27001 Lead Implementer, or ISO 27001 Lead Auditor are listed. Excellent Dutch and English are required.

Requirements

• Completed higher professional or university degree in cyber security, IT, information security, risk management, or a similar field
• More than 10 years of experience in a senior management role within cyber security, information security, or technology risk
• Demonstrable experience building or transforming a security organization within a complex environment
• Certifications such as CISSP, CISM, CRISC, ISO 27001 Lead Implementer, ISO 27001 Lead Auditor, or similar
• Excellent command of Dutch, spoken and written
• Excellent command of English, spoken and written
• Solid knowledge of governance
• Solid knowledge of cyber resilience
• Solid knowledge of third‑party security
• Solid knowledge of incident management
• Solid knowledge of control frameworks
• Ability to work between executives, technical teams, and business stakeholders
• Ability to create buy‑in and realize tangible improvements