ICT Expert Infrastructure

Project overview

Assignment Description

Are you an information security expert who sees risks before they occur? Do you want to play a crucial role in protecting the Netherlands from cyber threats? And do you get energized by translating policy into practical security measures that really work?

Our department is responsible for the technical management of the platform on which applications essential for the Netherlands run, such as the population registry (BRP), the Register of Non-Residents (RNI), passports, and ID cards. Security is always paramount: we apply the latest techniques to prevent data from being exposed unprotected.

Through continuous improvements in privacy, control over personal data, central and up-to-date data availability, and data minimization during issuance, the most current ICT standards are needed to achieve this ambition. This work is of great importance to the Netherlands: many users, such as the Royal Netherlands Marechaussee, Police, hospitals, Customs, and Tax Administration, depend on this data. Availability, security, and confidentiality are therefore top priorities, making the work challenging and meaningful.

As a security specialist in our Information Security department, you will be involved in assessing designs and changes for new customer applications and tools that will be deployed on our infrastructure. You will test these designs against the security guidelines and often collaborate with architects. You will support our client in conducting audits and security tests and following up on findings. You will work with platform administrators to identify vulnerabilities and make our infrastructure more secure.

You will analyze (new) vulnerabilities, such as those reported by the NCSC and our suppliers, and initiate actions within the teams where necessary. You will contribute to the creation of security-related process descriptions and periodically participate in security monitoring using Elastic. You will work in a small team with fellow Information Security colleagues and will also be the go-to person for Information Security questions for our department (on a rotating basis). Additionally, you will work closely with the Information Security colleagues of our client.

Through coaching, workshops, and exemplary behavior, you will increase awareness of security risks within the department, making information security an integral part of daily work. In addition to the Elastic SIEM, the Information Security team also uses various tools for vulnerability scanning and hardening.

Background of the assignment

The department manages the platform for applications that concern all of us in the Netherlands, including the population registry, passports, and ID cards. We pay a lot of attention to the security of this data by applying modern techniques. Because we don't want this data to be leaked. Due to the many improvements and adjustments in the areas of privacy, more control over personal data, making this data centrally and up-to-date available, and data minimization during the issuance of this data, the latest ICT standards are necessary to fulfill this ambition.

Think of hybrid cloud solutions, container technology, API management, multi-factor authentication (MFA) solutions, and all this within a Zero Trust Architecture (ZTA). All of these are very important for keeping the Netherlands running. The continuity, security, and confidentiality of the data are therefore absolute top priorities, which makes the work very challenging. Where your drive for innovation and up-to-date expertise are a requirement, and your creativity and curiosity will certainly come into their own.

Requirements

Assignment is not suitable for freelancers due to DBA law.

Demonstrable knowledge of Information Security from a technical background, evidenced by a completed HBO (University of Applied Sciences) degree in Technical Informatics/Cybersecurity, or evidenced by at least two relevant certifications in information security combined with at least five years of work experience in technical IT.

CISSP, CCSP, CISM, or equivalent certification in information security.

At least three years of demonstrable work experience in cybersecurity/technical information security.

Wishes

Demonstrable experience with assessing designs and changes from a risk perspective.

Demonstrable experience with/knowledge of networks (IDS/IPS), Ansible, RHEL, Windows, and/or Kubernetes.

Demonstrable experience with vulnerability scanning, pentesting, and hardening.

Demonstrable experience with (preferably Elastic) SIEM solutions.

Competencies

Analytically sharp and self-starting: you can quickly familiarize yourself with our complex landscape and can quickly and independently take on tasks from that basis.

Communicative: you communicate with technicians, architects, process managers, auditors, and business stakeholders and can convey your vision clearly and steadfastly. You have good written communication skills.

Accurate: you ensure good recording and documentation.

Additional Information

When you, as a supplier, offer a professional to us and they are placed, we will need information from you as a contracting party, including regarding the Chain Liability Act (Wet keten- en inlenersaansprakelijkheid).

The 'WKA' aims to prevent abuse in the remittance of payroll taxes at all links in the chain; from supplier to client. We cover these risks for our clients through a blocked account, the G-account. This is an account to which a portion of the invoice amount is deposited and from which you can pay payroll taxes and VAT to the Tax Administration. The percentage to be deposited depends on whether you have an SNA certification (NEN-4400-1 or NEN-4400-2) and whether your company is located in the Netherlands or abroad. You can apply for the G-account from the Tax Administration.

If you cannot obtain a G-account (and you can provide proof of this from the Tax Administration), you also have the option to submit an accountant's statement (assurance report regarding personnel lending) quarterly. In this, a certified accountant (AA or RA) will issue a statement about the correctness, completeness, and timeliness of the remittances. Please note that the costs for this statement are at your own expense.

Project details

• Start: 2026-11-26T23:00:00
• Location: Den Haag Zuid-Holland, NL
• Languages: Dutch