Interim Section Manager Information Risk Management

Project overview

Three reasons why this is your assignment

Due to the long-term absence of the current manager, the SVB is looking for an experienced interim Section Manager Information Risk Management (IRM) for the Social Security Services (DSV) and Healthcare and Welfare Services (DZW) directorates.

We are looking for a robust and connecting leader who can step in immediately, provide direction to recently formed teams of information risk professionals, and make a significant contribution to further strengthening risk management, information security, and privacy within the organization.

Why this assignment is interesting is that you will lead recently formed IRM teams and contribute to the further professionalization of risk management within the DSV and DZW directorates. You will play a key role in keeping the organization "in control" and continuously improving processes in the areas of information security, privacy, and compliance. You will make a visible impact within a social organization where reliable service to citizens is central.

Responsibilities

As an interim Section Manager IRM, you will lead the second line of defense within the DSV directorate. You are responsible for managing the team and advising management and the directorate on risks, control measures, and compliance issues. You ensure that the organization adheres to its objectives, complies with relevant laws and regulations, and continuously works on improving processes and controls.

In addition, you are a critical and independent sparring partner for management and an important discussion partner for internal stakeholders.

Methodology and frameworks

The assignment is carried out within the frameworks of:

You are a strong discussion partner who can quickly build trust and gives professionals the space to take ownership. Meanwhile, you are results-oriented and know how to provide direction when needed.

In addition, you are:

Who you are

We are looking for an interim professional who brings both strong experience and substantive knowledge of Information Risk Management. The candidate has a WO (university) level of work and thinking. Demonstrable experience with Information Risk Management, information security, and compliance. Experience within a complex service or public organization. Extensive experience in managing highly educated professionals. Experience with change processes and organizational development.

• Leading and further developing the IRM team.
• Advising the management team of DSV on risks, information security, and privacy.
• Reporting on the status of risk management and compliance.
• Stimulating continuous improvement of processes and control measures.
• Connecting stakeholders within DSV, DZW, and other SVB directorates.
• Ensuring the security, reliability, and continuity of systems and processes.
• Strengthening risk awareness within the organization.
• Baseline Information Security Government (BIO).
• General Data Protection Regulation (GDPR).
• The SVB Privacy & Security Guideline (SPS).
• Integrated Risk Management based on the COSO model.
• Convincing and politically sensitive.
• Connecting and coaching.
• Proactive and take initiative.
• Customer-oriented and decisive.
• Strong analytical skills with sound judgment.
• Able to hold people accountable for responsibilities and results.

Nice to have

Duration of the assignment: 4 months

Additional information

When you offer a professional to us as a supplier and they are placed, we need information from you as a contracting party, including regarding the Chain Liability Act (Wet keten- en inlenersaansprakelijkheid).

The 'WKA' aims to prevent abuse in the remittance of payroll taxes at all links in the chain; from supplier to client.

We design these risks for our clients by means of a blocked account, the G-account. This is an account to which part of the invoice amount is deposited and from which you can pay payroll taxes and VAT to the Tax Authorities.

The percentage to be deposited depends on whether you have an SNA certification (NEN-4400-1 or NEN-4400-2) and whether your company is located in the Netherlands or abroad.

You can request the G-account from the Tax Authorities.

If you cannot obtain a G-account (and you can provide proof of this from the Tax Authorities), you also have the option to provide an accountant's statement (assurance report regarding personnel lending) every quarter. In this, a certified accountant (AA or RA) will issue a statement about the correctness, completeness, and timeliness of the remittances. Well, the costs for this statement are for your own account.

• Certifications such as CISM, CIPM, or equivalent.
• Experience within the government of an executive organization.
• Knowledge of BIO, GDPR, and governance, risk, and compliance issues.
• When submitting a candidate for the above request, a secondment arrangement is not allowed. The candidate must be employed by your organization. If there is an extra link in the chain, we will not consider your offer and will reject it immediately.
• A valid VOG (Certificate of Conduct) is required for deployment; starting earlier is not possible.

Project details

• Start: 2026-11-30T23:00:00
• Location: Amstelveen Noord-Holland, NL
• Languages: Dutch