CISO

Project overview

You work on information security, BIO2, and ENSIA. You translate analyses and risks into plans, policies, and improvement measures and help stakeholders with their implementation.

What will you do?

Twenterand is a committed municipality in the Overijssel landscape. From Bruinehaar to Den Ham, residents find their freedom and people support each other. With over 300 employees, the municipality feels connected to all 34,000 residents and stakeholders who live, work, and recreate here.

At the municipality of Twenterand, they believe that change is something you do together: with society, residents, and employees. The municipality is there for its people and listens to those who live, work, and recreate here. The employees are impact makers and true public servants who feel and take their responsibility. They love the Twente landscape and work and live there, on the edge where the spark ignited. Read more about the unique work environment at Work at Twenterand | Discover Your Spark.

• You test existing measures against BIO2 requirements and process the outcomes of the GAP analysis in the ISMS.
• You identify risks and priorities and initiate improvement actions in the ISMS.
• You draw up an implementation plan for BIO2, including responsibilities, dependencies, planning, and required resources.
• You advise management on feasibility and risks and provide a kick-off for stakeholders.
• You prepare documentation for internal and external audits.
• You prepare the administrative accountability for ENSIA, including the college statement and attachments, and submit it to the College of Mayor and Aldermen and the municipal council.
• You provide vertical accountability to supervisors, draw up an action plan for ENSIA, provide the kick-off, and start the ENSIA cycle.
• You prepare quarterly reports and have them approved by the Directorate.
• You draw up policies for patching, logging and monitoring, and vulnerabilities.
• You involve a TISO in the role of security officer for travel and value documents. You draw up a process for this, explain the procedure, and coordinate developments with HR and the Service department.
• You draw up instructions for managers to identify risks, including those related to the VOG (Certificate of Conduct) process within the Service department.
• Demonstrable completed HBO IT education
• Minimum 5 years of demonstrable relevant (C)ISO work experience within a municipality
• Minimum 5 years of demonstrable relevant experience as ENSIA coordinator
• Minimum 8 years of demonstrable relevant (C)ISO work experience within a municipality
• Demonstrable experience with the preparation and implementation of ISMS (Information Security Management System) and BIO2 and NIS2 (implementation)
• Demonstrable experience with IT risk management and performing risk analyses
• Demonstrable experience with setting up and completing GAP analyses

Project details

• Start: Zo snel mogelijk
• Duration: Verlenging: Onbekend
• Location: Vriezenveen, NL
• Rate: 108-108 EUR/h
• Languages: Dutch