Senior Security Risk Manager - Security by Design

GeekSoft Consulting; Veldhoven; On-site; EUR 110,000 - 150,000; Full time

Benefits offered by this job

Career development

Dutch benefits package

Job summary

GeekSoft Consulting in Veldhoven, Netherlands seeks a Senior Security Risk Manager to lead risk management activities across cloud and on-prem environments, ensuring Security by Design throughout all projects. You will collaborate with IT Security, Risk, and DevOps teams to translate threats into actionable controls and drive remediation.

The role requires 8+ years in information security risk management, ISO 27001 experience, and certifications (CISM/CISA/CISSP/CRISC/CCSP).

Qualifications

• 8+ years of experience in Information Security Risk Management.
• Identify, assess, and mitigate risks in line with policies and standards.
• Develop or update security policies, standards, and methodologies.
• Monitor compliance and drive awareness of security controls.
• Perform risk management across cloud and on-prem environments.
• Collaborate with IT Security, Risk and Assurance teams.
• Fluent in written and spoken English.

Responsibilities

• Help design, build and continuously improve the client's online platform.
• Research, propose and implement new technology solutions following best practices.
• Take responsibility for resiliency and availability of products.
• Act as a trusted security partner to key decision-makers.
• Drive security maturity and secure-by-design principles across the organization.
• Engage with R&D stakeholders to communicate risk and secure commitment.

Skills

Information security

Risk management

Security by design

Cloud security

Agile/SAFe

Stakeholder management

Education

Bachelor's degree in Information Security

CISM

CISA

CISSP

CCSP

Tools

Azure

Google Cloud Platform

SIEM

Job description

GeekSoft Consulting | Fixed Term Employment

Senior Security Risk Manager - Security by Design

Veldhoven, Netherlands | Posted on 08/26/2026

• Help design, build and continuously improve the clients online platform.
• Research, suggest and implement new technology solutions following best practices/standards.
• Take responsibility for the resiliency and availability of different products.
• Be a productive member of the team.

Requirements

• 8+ years of relevant experience in Information Security Risk Management.
• Ensure security risks remain within the defined risk appetite by proactively identifying, assessing, and mitigating risks in line with best practices, policies, and security standards.
• Identify security gaps, recommend improvements, and develop or update security policies, standards, processes, and methodologies.
• Monitor and report compliance with required security controls and drive business awareness of security processes and initiatives.
• Perform information security risk management and compliance activities across cloud and on-premises environments, projects, and initiatives.
• Support security risk management activities across hardware-related departments, particularly within cloud initiatives, ensuring Security by Design throughout all project phases.
• Provide risk-mitigation controls, recommendations, and guidance to DevOps teams.
• Assess and communicate residual risks to risk owners at operational and tactical levels.
• Perform, advise on, and follow up on generic security risk assessments and identified risks.
• Drive implementation and closure of agreed security controls and remediation actions.
• Ensure compliance with information security policies, standards, and regulatory requirements.
• Collaborate with IT Security, Business Security, Risk, and Business Assurance teams to align on security controls and compliance requirements.
• Actively participate in Agile/SAFe ceremonies and ensure security considerations are incorporated into continuous improvement activities.
• Drive security maturity and promote secure-by-design principles across the organization.
• Act as a trusted security partner to key decision-makers by providing advice, influencing decisions, and addressing security requirements.
• Collaborate with security professionals across different business areas and contribute to broader security initiatives.
• Engage with R&D stakeholders to understand security priorities, communicate the risk portfolio, and secure commitment for mitigation activities.
• Support information management security and compliance initiatives and drive their adoption across the business.
• Strong knowledge and practical experience in IT Security.
• Proven experience with the ISO 27001 risk management framework.
• Solid understanding of security risks across IaaS, PaaS, and SaaS environments.
• Hands-on knowledge of cloud security, preferably Microsoft Azure and Google Cloud Platform (GCP).
• Bachelor's degree or relevant education in Information Security, Audit, Cloud Computing, or a related field.
• Valid industry certification such as CISM, CISA, CISSP, CRISC, or CCSP.
• Ability to translate IT threats and vulnerabilities into business risks.
• Experience working within Agile/SAFe environments is preferred.
• Knowledge of Product Lifecycle Management (PLM) processes and tools such as Siemens Teamcenter is an advantage.
• Knowledge of export regulations is an advantage.
• Experience with or interest in traditional AI/GenAI solutions is preferred.
• Valid work authorization for the Netherlands.
• Strong analytical and problem-solving skills.
• Proactive, self-motivated, and results-oriented.
• Pragmatic approach with strong decision-making capabilities.
• Ability to handle resistance and drive change effectively.
• Excellent communication, influencing, negotiation, and stakeholder management skills.
• Ability to communicate effectively with stakeholders at different organizational levels, including external vendors and service providers.
• Strong team-player with the ability to collaborate across security and business functions.
• Fluent in written and spoken English.

Fixed Term Employment Contract

Work-Life Balance

Flexible Work Mode

What GeekSoft Consulting Offers

• International, collaborative consulting culture with clear career development paths.
  
• Comprehensive Dutch benefits package emphasizing well-being, mobility, and career growth.