Lead Security Engineer Cybersecurity & NIS2

Project overview

For our end client Enexis, Harvey Nash is looking for a Lead Security Engineer Cybersecurity & NIS2.

Note! Please send applications via the website, including the following information:

Dutch CV

Availability in hours per week

Has the candidate worked for Enexis before?

Holiday plans within the next 3 months

Expected start date: ASAP

Nice to have

Certifications such as Security+, SSCP, CISSP, CSSLP, or equivalent.

Experience with SAFe Agile working.

Experience within complex IT landscapes with both legacy and cloud solutions.

Knowledge of SAP security and/or DevSecOps environments.

Why this role?

At Enexis, you work on systems that are essential for the energy supply of the Netherlands. The impact of your work is directly visible: you help ensure that our digital services remain secure, reliable, and future-proof.

This role is ideally suited for a security professional who enjoys working with people. Of course, you have in-depth security knowledge, but your greatest added value lies in helping teams make security a part of their daily work themselves. You get energy from transferring knowledge, involving colleagues in changes, and building together an organization where security is not just for specialists, but for everyone.

In short, we are looking for someone who:

"not only implements security, but primarily helps the DevOps teams to design, develop, and manage securely themselves."

Interested? We would like to receive a CV and the following information (without this information, the CV will not be processed):

First possible start date

Availability in hours per week

Rate all-in (incl. travel, parking costs and any overnight stays, excl. VAT)

Has the candidate worked for Enexis before?

Holiday plans within the next 3 months

Place of residence

Motivation

Two references will be requested during onboarding.

By responding to this request, the Contractor declares to have taken note of and agrees with the General Hiring Conditions or General Hiring Conditions for Freelance Professionals of Harvey Nash and the associated Client Appendix Enexis. These can be found at www.harveynash.nl/Enexis

Project details

30-06-2027

Option for extension: Yes, typically 6 months

Number of hours per week: 32-40

Location of work: Den Bosch

On-site or from home: 50/50

Business kilometers: n/a

Freelancer possible: No

Deta-Vast: No

Deadline for proposing candidates: 10-11-2026, 12:00

Position scale: 16

Target rate (all-in, including travel and parking costs and any overnight stays, excluding VAT): €103.67

Date of intake interview at Enexis online or on-site: tbd

Interview partners: tbd

Screening type: Basic

Security Engineer Cybersecurity & NIS2

Value Chain Large Consumers & Grids

Do you want to play a key role in the cyber resilience of one of the most critical infrastructures in the Netherlands? Are you a security professional who is not only strong in content but also gets energy from guiding and developing teams? Then we are looking for you.

Note: It is important that candidates have hands-on experience with coaching/project management. This is also emphasized in the text.

Your Challenge

As a Security Engineer, you are part of the Large Consumers & Grids value chain. Within this chain, you work on a diverse landscape of applications and systems, ranging from SAP back-office environments to customer-facing web portals and custom applications.

Together with Security & Privacy Officers, Product Managers, Architects, and DevOps teams, you ensure that information security is structurally embedded in our products and processes. You translate security policy and legislation, including NIS2, into practical solutions that add direct value to the organization.

You are a pragmatic connector who makes security part of the daily workflow of our DevOps teams. You help teams apply Security by Design principles, translate complex security issues into understandable and workable solutions, and ensure that teams become increasingly self-sufficient in safeguarding security within their products. You are therefore not only a specialist but also a coach, sparring partner, and driver of a security-aware culture.

What will you do?

You collaborate with product teams and stakeholders to successfully implement information security.

You monitor and improve the security requirements of applications within the Large Consumers & Grids value chain.

You identify security risks and perform risk and threat analyses for new or modified functionalities.

You implement appropriate security measures that ensure the confidentiality, integrity, and availability of data.

You support DevOps teams in applying secure coding, access management, encryption, and other security best practices.

You automate controls, security tests, and compliance checks within CI/CD processes.

You ensure that the value chain demonstrably complies with the Enexis Integral Framework and relevant legislation, including NIS2.

You guide DevOps teams in applying Security by Design and help them to integrate security from the design phase.

You translate security guidelines, policies, and legislation into concrete, actionable measures for development teams.

You coach and support teams in increasing their security knowledge and help them take more responsibility for their own cyber resilience.

You create buy-in for security by involving teams and stakeholders in the 'why' behind security measures.

You stimulate knowledge sharing and security awareness within the value chain and contribute to a culture where security is a natural part of development and management.

You act as a point of contact and sparring partner for teams regarding information security.

What you bring

Minimum HBO work and thinking level.

Extensive experience within ICT and at least three years of experience in a comparable security role.

Knowledge of information security, cybersecurity frameworks, and risk management.

Experience with NIS2 or similar compliance and security guidelines.

Hands-on experience with security testing tools, such as SAST, DAST, and vulnerability scanning solutions.

Experience with automating controls and tests within CI/CD environments.

Knowledge of application security, encryption, identity & access management, and secure software delivery.

Strong analytical skills and the ability to pragmatically solve complex security issues.

In addition, you possess

The ability to make complex security issues understandable for colleagues with different backgrounds.

Experience with guiding, coaching, or involving teams in improvement or change processes in the area of security, compliance, or quality.

Strong communication skills and the ability to create buy-in without managing through control or hierarchy.

Persuasiveness, organizational sensitivity, and the talent to connect different stakeholders.

A pragmatic attitude; you understand that security is only successful when it aligns with the daily practice of development teams.

The talent to transfer knowledge and get colleagues enthusiastic about secure development.

• Start: flexible
• Remote: hybrid
• Location: Den Bosch, Noord-Brabant, NL
• Languages: Dutch