Security Officer (LISO)
About the assignment
A leading essential services provider in the Netherlands seeks a Security Officer to own information security organisation-wide. You report to the managing director and work cross-functionally with teams and external partners.
The organisation falls under the Dutch Cybersecurity Act (implementing NIS2) and serves government clients requiring NIS2, BIO2, and Logius compliance. You advise on risk, drive policy implementation, oversee incident response, and maintain certification readiness—all while building security awareness across the business.
Your responsibilities
- Maintain risk assessments, risk register, and confidentiality/integrity/availability evaluations for systems and information
- Pre-assess new and modified solutions for security risk within projects and document technical/functional trade-offs
- Advise leadership and teams on controls, best practices, and vendor risk with clear residual risk statements
- Translate group security policy into the client procedures and work instructions; keep them current
- Ensure NIS2, BIO2, and Logius (DigiD assessment) compliance is demonstrable and monitored
- Prepare and oversee ISO 27001 and ISAE 3402 certifications; coordinate internal audits and track findings
- Coordinate security incident response from alert through evaluation; prepare statutory notifications within legal timeframes
- Report periodically to leadership and group CISO on risks, incidents, and progress; maintain ISMS documentation
Tech Stack & Tools
Platforms & Tooling
Frameworks & Standards
Methodologies
Certifications (preferred)
Must-haves
- HBO or WO degree (preferably computer science, information security, or equivalent)
- Minimum 5 years in information security, including time as Security Officer or equivalent role
- Hands-on experience with risk management, compliance frameworks, and incident response
- Ability to translate policy into procedures and build practical compliance across teams
- Fluent in Dutch and English; clear communicator with both technical and non-technical audiences
Nice-to-haves
- Experience with NIS2, BIO2, or Cybersecurity Act compliance in critical infrastructure
- Familiarity with government or essential services sector requirements (Logius, DigiD)
- Background in ISO 27001 certification or internal audit coordination
What we offer
- Strategic role reporting directly to managing director with functional tie to group CISO
- End-to-end ownership of security risk, compliance, and incident response
- Cross-functional collaboration with peer security officers across the group
- Engagement with external partners: NCSC, Logius, industry peers
- Opportunity to shape security culture and build awareness across the organisation
- Personal guidance from a dedicated MVPeople consultant who knows your niche
The process
Introduction
Phone call with your MVPeople consultant (within 24 hours)
Match & Brief
We discuss the assignment in detail and prepare you
Client meeting
Introduction to the client
Start
Contracting and onboarding
Details
Type
Freelance / ZZP (MVPeople)
Location
Veenendaal, UT
Work model
Hybrid
Level
Senior
Industry
digitale-infrastructuur
Market indication
€90 - €120 per hour
Posted
14 October 2026
Job ID
59049
Contact
MVPeople Group
jobs@mvpeoplegroup.com