Project Manager Information Security & Supplier Risk Management

Project overview

What will you do

As Project Manager Information Security & Supplier Risk Management at Evides, you will play an important role in strengthening the organization's digital resilience. Due to the introduction of the Cybersecurity Act (Cbw) and the increasing demands regarding information security, it is necessary to demonstrably manage risks within supplier relationships and supply chains.

You will be responsible for developing and implementing an Evides-wide, workable, and auditable method for managing information security risks. You will work closely with various disciplines, including Procurement, Contract Management, Supplier Management, Privacy, Legal Affairs, ICT, and representatives from the primary business processes.

You will lead the project from the initiative phase through to implementation and handover to the line organization. In doing so, you will ensure connection between content, processes, people, systems, and contractual agreements. Thanks to your experience, you know how to translate complex issues into practical solutions that are supported throughout the organization.

Your activities

Who are you?

What else you should know

Scale: 12

Due to absence, this vacancy will be open longer than usual.

The interviews will take place on:

Are you a new supplier and have not yet signed a cooperation agreement and a customer-specific addendum? This will follow immediately after the award of the assignment.

The following customer-specific conditions apply to this assignment for the client Evides:

• Leading the project concerning information security within supplier relationships and supply chains.
• Preparing and realizing a supported project plan including planning, governance, and implementation approach.
• Inventorying, assessing, and documenting suppliers and relevant supply chains for information security risks.
• Structuring processes for risk assessment, monitoring, and periodic reassessment of suppliers.
• Translating laws and regulations, policies, and frameworks into workable processes, roles, and work instructions.
• Ensuring information security requirements in contracts, agreements, and supplier arrangements.
• Performing and coordinating risk analyses within critical ICT services and associated supply chains.
• Implementing processes for the procurement, use, management, and termination of cloud services.
• Preparing implementation, communication, and training plans for involved employees.
• Coordinating with internal stakeholders and management on progress, risks, decisions, and necessary measures.
• Ensuring an auditable setup that meets the requirements of the Cybersecurity Act (Cbw) and the sectoral standards within the drinking water sector.
• Demonstrable experience in leading complex, organization-wide implementation and change processes.
• Experience at the intersection of information security, supplier and chain risk management, procurement, and contract management.
• Knowledge of information security standards and legislation, including NIS2 and the Cybersecurity Act (Cbw).
• Experience in translating policies and frameworks into processes, governance, contractual agreements, and control measures.
• Experience within organizations with vital or critical service provision is a strong plus.
• Excellent communication skills and the ability to engage stakeholders at various levels.
• Availability of 40 hours per week during the project duration.
• Tuesday, October 13 from 09:00 to 10:00 AM
• Tuesday, October 13 from 1:00 PM to 2:00 PM
• Tuesday, October 13 from 2:30 PM to 3:30 PM
• Candidate to be submitted with an all-in rate.
• *In the context of equal pay, you will find the employment conditions of Evides here:*https://hub.driessengroep.nl/m/0dfcd37e-7e4d-4488-846b-2a57f87a6a3f
• Please submit the CV in Dutch.
• If there is sufficient supply, we will close the role earlier than the indicated deadline in the portal. Therefore, submit a suitable candidate as soon as possible.
• It is not permitted to insert an extra link between the candidate and the supplier offering the candidate.
• We would also like to receive in the personal motivation a substantiation demonstrating that the candidate possesses the required competencies.
• The candidate possesses a proof of identity (a passport or identity card), which is valid at intake and on the start date of the candidate's contract and can be presented for inspection.
• The Evides General Terms and Conditions Drinking Water 2026 apply to every assignment.
• The transfer period for flexible workers is 1800 hours.
• Invoicing is based on billable hours.
• Indexation does not apply.
• A valid Certificate of Conduct (VOG) is required for every placement. The costs for this lie with the supplier/freelancer.
• Upon termination of an assignment by Evides, a notice period of 30 calendar days applies, and immediately in case of force majeure.

Project details

• Start: 2026-11-01
• Duration: 1 nov 2026 - 1 nov 2027
• Location: Rotterdam Kralingen, NL
• Rate: 101-101 EUR/h
• Languages: Dutch