Postdoc Understanding Practices and Stakeholder of Patching Security in Organizations

Postdoc Understanding Practices and Stakeholder Experiences of Patching Security in Organizations

We are in an age of frequent news stories about vulnerabilities in organisational IT systems being exploited to steal customer data or inject malware and ransomware. The costs are rising, yet many organisations still do not patch their IT systems in a timely manner. The NWO‑funded THESEUS project aims to radically change the risk governance of patching. Partner organisations include KLM‑Air France, Rijkswaterstaat, City of Amsterdam, City of The Hague, KPN and the National Cyber Security Center.

• Collect and analyse data from partner organisations, including interviews, surveys, ticketing systems and incident logs.
• Investigate organisational and technical practices around patching and their impacts.
• Work closely with research teams from computer science and social science disciplines.
• Produce publishable results, present findings at international conferences and collaborate with leading researchers.

• PhD or equivalent in a social science, behavioural science, organisational science or a field investigating the human aspects of information security (including relevant areas of computer science or information systems).
• Strong academic writing and communication skills.
• Independent organisational and analytical capabilities.
• A curious, critical mindset and the ability to work within an interdisciplinary team.
• Knowledge of Dutch a plus, since interviews will be conducted with employees of Dutch organisations.

• Contract duration until 31 March 2028 (temporary).
• Full‑time position, 38–40 hours per week.
• Salary and benefits in accordance with the Collective Labour Agreement for Dutch Universities, including a pension scheme via ABP.
• Annual individual employment packages and supplemental health insurance discounts.
• 232 leave hours per year (at 38 hours), with options to buy or sell additional leave.
• Opportunities for further education, training and courses.
• Partially paid parental leave and health‑and‑well‑being programme.