About the assignment
You support the CISO and executive leadership in developing and executing enterprise information security strategy. Your focus is on translating board-level security requirements into actionable governance frameworks and risk mitigation programmes.
You bridge the gap between technical security teams and business stakeholders. You assess emerging threats, evaluate compliance obligations, and recommend security investments that balance risk and operational efficiency.
Your impact: strengthen the organisation's security posture, ensure regulatory alignment, and enable secure business growth.
Your responsibilities
- Advise CISO and board on security strategy, emerging threats, and regulatory changes
- Develop and maintain enterprise information security governance frameworks and policies
- Assess and prioritise security risks across business units and critical systems
- Evaluate third-party security vendors and manage strategic partnerships
- Monitor compliance with ISO 27001, NIS2, DORA, and industry-specific regulations
- Lead security architecture reviews and technology assessments
- Report on KRIs and security metrics to executive leadership
- Mentor security teams and drive security culture initiatives
Tech Stack & Tools
Platforms & Tooling
Frameworks & Standards
Cloud & Infrastructure
Methodologies
Certifications (preferred)
Must-haves
- 10+ years in cybersecurity with 3+ years in advisory or governance role
- Proven experience advising C-suite and board on security strategy
- Deep knowledge of ISO 27001, NIST, and NIS2/DORA frameworks
- Track record managing enterprise security programmes and vendor ecosystems
- Fluent in Dutch and English (written and spoken)
- CISSP, CISM, or equivalent certification
Nice-to-haves
- Experience in financial services, energy, or regulated industries
- Hands-on GRC tool experience (ServiceNow, Archer, OneTrust)
- Background in security risk quantification and metrics
- CCISO or Board Advisor certification
What we offer
- Shape enterprise security strategy at executive level
- Work directly with CISO and board leadership
- Influence technology and vendor decisions across the organisation
- Access to senior security networks and industry forums
- Continuous learning in emerging threats and regulations
- Personal guidance from a dedicated MVPeople consultant who knows your niche
The process
Introduction
Phone call with your MVPeople consultant (within 24 hours)
Match & Brief
We discuss the assignment in detail and prepare you
Client meeting
Introduction to the client
Start
Contracting and onboarding
Details
Type
Consultancy
Location
Gelderland
Work model
Hybrid
Level
Senior
Industry
overige
Posted
11 May 2026
Contact
MVPeople Group
jobs@mvpeoplegroup.com