Advisor SOC Ecosystem

Project overview

Assignment Description

Goal of the Assignment

The assignment involves independently developing and delivering a well-founded proposal for the setup and further development of the central SOC. The objective is a description of the target state for the SOC service to be presented to the CIO council for decision-making. Subsequently, the SOC will be built. The contractor will start from existing SOC initiatives, DICTU services, ongoing further development, and the conclusions from the KPMG study. This will determine what is already usable; establish what is still missing; and in parallel, prepare the necessary decisions.

The various tracks in the assignment concern, among other things, adapting the technical provision, the framework of agreements, onboarding, dashboarding, and financing. The assignment will be executed based on an iterative and results-oriented approach. The contractor will independently determine the appropriate working method within the agreed assignment results and delivery deadlines.

Performance Agreements and Deliverables

1.) The contractor will deliver a detailed proposal for the governance, including demarcation and agreements, of the SOC system, consisting of one generic central SOC and decentralized SOC (components) within the business units of EZK/LVVN.

2.) The contractor will analyze and structure the needs. Based on this analysis, a proposal will be developed for the articulation of needs from the business units of EZK/LVVN towards generic SOC services and a functional design for these services that aligns with best practices. Various reports and studies are already available for this.

3.) The contractor will deliver a detailed proposal for the GAP between existing generic central SOC services from DICTU and the intended functional design, including a roadmap with prioritization based on the articulation of needs on how to realize this GAP. This assignment will be concluded with the delivery of the 3 aforementioned performance agreements.

Background of the Assignment

The proposal must contain the intended target state of the SOC. The emphasis is on maximum reuse of existing building blocks and adapting them within the governance, roles, financing, and agreements of the I-Ecosystem. The proposal must describe variants for the scope of the SOC: only the system layer, governance, and central provisions, or also security for high-risk applications, application chains, or specific logging and monitoring obligations. A decision on the scope of the service is a prerequisite for determining obligations, exceptions, financing, and execution responsibilities.

Furthermore, the functional scope must be described. The minimum functionality must include the previously researched SOC capabilities: security monitoring, log management, security incident management, security analysis and forensics, threat intelligence, threat hunting, and vulnerability management. A distinction must be made between functional SOC processes and the technical SOC provision that supports these processes.

For the scope decision, three directions of thought can be elaborated: a minimal system layer with governance, agreements, and a concern-wide overview; a joint SOC service with additional obligations for logging, monitoring, and incident response; or a broader security system that also includes high-risk applications, chains, and additional security processes.

Requirements

More than 10 years of work experience at C-level within the domain of information security, demonstrably supported by concrete examples in the CV.

More than 5 years of demonstrable work experience in business development roles, substantiated with concrete examples in the CV.

Wishes

Demonstrable experience in advising on SOC ecosystems.

Demonstrable experience in working within complex ecosystems with multiple organizations with their own and centralized IT and SOC.

Competencies

Collaboration

Advisory skills

Project management skills; planning and organizing activities to deliver the agreed output on time for approval in formal meetings.

Additional Information

When you offer a professional to us as a supplier and they are placed, we will need information from you as a contracting party, including regarding the Chain and Principal Liability Act (Wet keten- en inlenersaansprakelijkheid - WKA). The 'WKA' aims to prevent abuse in the remittance of payroll taxes at all links in the chain; from supplier to client. We cover these risks for our clients by means of a blocked account, the G-account. This is an account to which a portion of the invoice amount is deposited and from which you can pay payroll taxes and VAT to the Tax Authorities.

The percentage to be deposited depends on whether you have a SNA certification (NEN-4400-1 or NEN-4400-2) and whether your company is established in the Netherlands or abroad. You can apply for the G-account from the Tax Authorities. If you cannot obtain a G-account (and you can provide proof of this from the Tax Authorities), you also have the option to submit an accountant's statement (assurance report regarding personnel lending) every quarter. In this, a certified accountant (AA or RA) will issue a statement about the correctness, completeness, and timeliness of the remittances.

Please note, the costs for this statement are for your own account.

Project details

• Start: 2026-10-29T23:00:00
• Location: Den Haag Zuid-Holland, NL
• Languages: Dutch