Information Security Officer / Lead ISO

Project overview

Client

The iRealisatie cluster is the software development department of the Ministry of VWS. iRealisatie was established during times of crisis to quickly develop high-quality digital support tools contributing to the fight against and control of the COVID-19 pandemic. iRealisatie is now part of the Information Policy directorate and, on behalf of VWS policy departments and implementing organizations, develops custom software and tools that accelerate digitalization in healthcare. This includes:

iRealisatie has all the in-house capabilities to design, develop, and manage software, with a privacy and security-first approach. We build software, web applications, and mobile apps.

By 2026 and 2027, iRealisatie will gradually phase out and eventually wind down its operations within the core department of VWS, with various landing spots for current projects. The exact method and timeline for this wind-down are still unclear but will take several more years, given the duration of existing projects. 2026 and 2027 are focused on successfully continuing existing projects and further professionalizing the organization where efficient, in preparation for the transition.

Assignment Description

As an Information Security Officer (ISO), you will focus explicitly on the concrete implementation and coordination of information security within the organization. This means you will not only draft policy but also translate it into actionable measures, clear processes, and workable protocols that align with daily practice. You are responsible for drafting, updating, and implementing policy documents, guidelines, and work instructions that contribute to compliance with NEN 7510.

Furthermore, you will ensure the integration of security and compliance requirements into existing business operations, making information security a natural part of the work process. You will collaborate with management, ICT, and operational teams to embed security measures in policy and behavior. This includes developing incident and continuity protocols, conducting risk analyses, and defining control measures that contribute to a demonstrable and sustainable security level.

Through your efforts, information security will become not just a normative framework but also a practical and supported component of the organizational culture.

Additionally, you will fulfill a coordinating role within the information security organization. You will maintain an overview, coherence, and progress of the work of security officers/liaisons and ensure structured execution of the annual plan. You will monitor the follow-up of improvement measures arising from risk analyses, audits, deviations, and security incidents. You will identify bottlenecks, monitor priorities, and ensure timely coordination and reporting on progress and potential risks.

• Exploring and demonstrating new solutions through pilots or PoCs (Proof of Concepts).
• Developing and realizing new software and digital tools based on privacy and security by design.
• Modernizing existing, outdated information systems.
• Providing technical advice on digitalization issues.

Requirements

Functional Desires

Requirements 1

Candidate demonstrably possesses a minimum of a Master's degree (WO) work and thinking level. Verifiable in CV and motivation (evident from completed education and/or at least 2 years of work experience at WO level).

Requirements 2

Candidate has at least three years of experience with certification processes and information security within a government organization, where you helped the internal organization navigate the process.

Requirements 3

Candidate has at least five years of experience implementing technical and organizational security measures in accordance with the requirements of ISO 27001, NEN 7510, and the BIO.

Desires 1

Degree to which the candidate has experience with compliance with ISO 27001, NEN 7510, and BIO through internal audits, gap analyses, and monitoring.

Desires 2

Degree to which the candidate has experience with risk analysis and developing risk management strategies, where they are also capable of analyzing complex security problems and formulating effective solutions.

Desires 3

Degree to which the candidate has experience coordinating information security activities within an organization, maintaining an overview of the work of security officers and monitoring coherence, prioritization, and progress.

Desires 4

Degree to which the candidate possesses the required competencies and skills (verifiable in CV, motivation, and/or possible interview).

• You possess a minimum of a Master's degree (WO) work and thinking level.
• You have at least three years of experience with certification processes and information security within a government organization, where you helped the internal organization navigate the process.
• You have at least five years of experience implementing technical and organizational security measures in accordance with the requirements of ISO 27001, NEN 7510, and the BIO.
• You have experience with compliance with ISO 27001, NEN 7510, and BIO through internal audits, gap analyses, and monitoring.
• You have experience coordinating information security activities within an organization, maintaining an overview of the work of security officers and monitoring coherence, prioritization, and progress.
• You have experience with risk analysis and developing risk management strategies, and you are capable of analyzing complex security problems and formulating effective solutions.
• You hold relevant certifications such as CISSP, CISM, ISO 27001 Lead Implementer/Auditor, or equivalent.
• You have insight into relevant legislation and regulations regarding data protection and information security.
• You have strong communication skills and can clearly and understandably convey complex information to various stakeholders.
• You are a good listener to the organization's needs and can translate them into effective policies that come to life and work for the organization.
• You work well independently, as well as in a team, and have a proactive attitude towards identifying risks and implementing security measures.

Project details

• Start: 2026-11-19T23:00:00
• Location: Den Haag Zuid-Holland, NL
• Languages: Dutch