Information Security Manager
Listed on 2026-10-14
-
IT/Tech
Cybersecurity, Information Security & Data Protection, IT Consultant, IT Project Manager
Netherlands, Amersfoort Royal HaskoningDHV
Job DescriptionRoyal HaskoningDHV is looking for an experienced Information Security Manager to strengthen the information security maturity of its international organization in Amersfoort, Netherlands
. The role combines strategic leadership with hands‑on execution and involves building a new central security function and team.
The Information Security Manager will develop and implement the information security strategy, roadmap, and improvement plans, while establishing governance, policies, standards, and controls based on a pragmatic NIST approach
. The position also involves translating security risks into clear business and IT decisions, building and coaching a professional security team, and advising the Board of Directors and senior management on cyber risks, resilience, and investment priorities.
Candidates should have a completed higher professional or university degree in cyber security, IT, information security, risk management, or a similar field
, along with more than 10 years of experience in a senior management role within cybersecurity, information security, or technology risk. Demonstrable experience building or transforming a security organization is required. Certifications such as CISSP, CISM, CRISC, ISO 27001 Lead Implementer, or ISO 27001 Lead Auditor are listed. Excellent Dutch and English are required.
- Completed higher professional or university degree in cyber security, IT, information security, risk management, or a similar field
- More than 10 years of experience in a senior management role within cyber security, information security, or technology risk
- Demonstrable experience building or transforming a security organization within a complex environment
- Certifications such as CISSP, CISM, CRISC, ISO 27001 Lead Implementer, ISO 27001 Lead Auditor, or similar
- Excellent command of Dutch, spoken and written
- Excellent command of English, spoken and written
- Solid knowledge of governance
- Solid knowledge of cyber resilience
- Solid knowledge of third‑party security
- Solid knowledge of incident management
- Solid knowledge of control frameworks
- Ability to work between executives, technical teams, and business stakeholders
- Ability to create buy‑in and realize tangible improvements
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).