Corporate Information Security Officer; CISO ZH, NL, AA

A unique opportunity to lead and shape cybersecurity at one of the world's leading marine contractors. With a clear cybersecurity strategy, executive sponsorship, dedicated budget, and a high-performing cybersecurity team already in place, we are looking for a Corporate Information Security Officer (CISO) who will take our cybersecurity capabilities to the next level.

As our CISO, you will be responsible for defining, driving, and continuously improving cybersecurity across the Heerema Group. While the strategic direction for 2026–2028 has been established and is fully supported by Executive Management, significant opportunities remain to further refine, develop, and execute the roadmap in the years ahead. This is your chance to make a lasting impact on the future of cybersecurity within Heerema.

As a member of the IT & Digital Management Team, you will work in close partnership with the VP IT & Digital, taking ownership of the full cybersecurity landscape across Information Security, IT Security, and Operational Technology (OT) Security. You will have direct visibility at Board level, providing regular updates to the CEO and CFO, and acting as a trusted advisor on cybersecurity risks, opportunities, and strategic priorities.

You will inherit and lead a highly capable cybersecurity organization of more than ten professionals, focused on protecting a global business operating in complex and challenging environments.

• Lead, develop and continuously improve Heerema's cybersecurity strategy, governance, and operating model.
• Refine and execute the 2026–2028 cybersecurity roadmap, translating strategic objectives into practical initiatives and measurable outcomes.
• Lead a high-performing cybersecurity team and further strengthen capabilities, expertise, and cybersecurity services across the organization.
• Drive cybersecurity maturity, architecture, risk management, and resilience improvements across Information Security, IT, cloud, and OT environments.
• Act as a visible ambassador for cybersecurity, creating awareness and fostering a strong security culture throughout the organization.
• Serve as the primary advisor to Executive Management on cybersecurity risks, compliance, investments, and strategic decision-making.
• Oversee compliance with relevant regulations, standards, and frameworks, including ISO 27001/27002, NIST, GDPR, and NIS
  2.
• Represent Heerema towards auditors, customers, partners, suppliers, and regulatory authorities on cybersecurity-related matters.
• Ensure cybersecurity investments and resources are aligned with business priorities, risk appetite, and operational realities.
• Lead the development and delivery of future cybersecurity initiatives planned for 2027 and 2028.

• 5–10 years of experience in a senior cybersecurity leadership role such as CISO, Head of Security, or equivalent.
• Master's degree in Cybersecurity, Information Technology, Computer Science, Business Administration, or a related discipline is preferred.
• Strong technical cybersecurity background combined with proven strategic leadership experience.
• Demonstrated experience in cybersecurity strategy, governance, architecture, risk management, and technical cybersecurity operations; experience leading multidisciplinary cybersecurity teams and developing talent.
• Strong programme and portfolio management capabilities, able to drive complex transformations across the organization.
• Solid understanding of cybersecurity maturity frameworks and continuous improvement methodologies.
• Experience with ISO/IEC 27001/27002, NIST CSF, NIST 800-53, GDPR, NIS2 and related regulatory requirements.
• Strong knowledge of risk methodologies, control testing, audit practices, assurance activities, and evidence management.
• Comfortable operating across IT, OT, digital, and operational environments while balancing business objectives with security requirements.
• Strong stakeholder management and influencing skills, with experience engaging Executive Management and Board-level audiences.
• One or more relevant certifications such as CISSP, CISM, CCISO, or equivalent.

Among others,…