Strategic Information Security Risk Manager

WestPoint Search; Utrecht; On-site; EUR 90,000 - 140,000; Full time

Benefits offered by this job

Car allowance

Bonus

Job summary

WestPoint Search has been retained to appoint an Information Security Risk Manager for an international organisation operating across IT and OT environments. Working directly with the CISO, this newly created role will shape how risk is identified, assessed and communicated across the business.

You will develop the risk management framework, perform BIAs, introduce quantitative methods such as FAIR, and produce executive reporting to inform risk-based investment decisions.

Qualifications

• Significant experience in Information Security or Cyber Risk Management.
• Experience developing or owning security risk frameworks, methodologies and risk registers.
• Strong knowledge of ISO 27001 and risk-based security governance.
• Experience with Business Impact Assessments and translating cyber scenarios into tangible business impact.
• Ability to engage and influence senior business, technology and security stakeholders.
• Experience producing executive or board-level risk reporting.
• Professional Dutch speaking and written skills.

Responsibilities

• Develop and mature the risk management framework and enterprise risk register.
• Strengthen BIAs across critical services and operations.
• Introduce quantitative cyber risk approaches, including FAIR where appropriate.
• Translate cyber risks into operational, commercial and financial impact.
• Develop executive and board-level risk reporting for decisions.
• Strengthen third-party security risk management and ISO 27001/NIS2 alignment.

Skills

Security risk management

ISMS ISO 27001

Executive reporting

Stakeholder influence

Business impact assessment

Quantitative risk

Tools

GRC platforms

FAIR methodology

Job description

WestPoint Search has been retained to appoint an Information Security Risk Manager for an international organisation operating across IT and OT environments. Working directly with the CISO, this newly created role will shape how risk is identified, assessed and communicated across the business.

You will develop the risk management framework, perform BIAs, introduce quantitative methods such as FAIR, and produce executive reporting to inform risk-based investment decisions.