Project Manager Resilience - RVO

Project details

between 100-120 per hour Assignment Description The contractor supports RVO Directorate IV in drawing up an integral plan of action (PoA) for strengthening RVO's IT resilience. The contractor will map out the current situation, relevant developments, and key risks and translate these into a concrete and actionable plan of action. This will take into account relevant government-wide developments and frameworks in the areas of digital resilience, information security, continuity, and risk management. The contractor will work closely with the relevant departments within RVO and with EZK as a concern.

Where relevant, it will connect with government-wide developments and existing approaches, so that RVO does not independently develop what is already available or being developed elsewhere.

The activities include at least: analyzing the current maturity and setup of IT resilience within RVO; identifying key risks, vulnerabilities, dependencies, and development points; mapping relevant legal, policy, and government-wide frameworks and developments; gathering and connecting information from relevant stakeholders within RVO and EZK; mapping existing initiatives, responsibilities, and ongoing activities; determining the desired situation and the key development tasks; elaborating concrete measures, priorities, responsibilities, and dependencies; drawing up a realistic phasing and roadmap that is concrete to implement; advising on the necessary governance, steering, and collaboration; incorporating findings and advice into an integral and administratively usable PoA.

Performance Objective The assignment will result in a concrete and supported plan of action for IT resilience within RVO. The PoA will provide insight into the current and desired situation, the key risks and development tasks, and the concrete measures needed to further strengthen IT resilience. The PoA will also include clear prioritization, phasing, governance, and division of responsibilities and will align with developments within EZK and with relevant government-wide developments.

Background of the assignment RVO is undergoing a multi-year development to structurally strengthen the organization's digital resilience and risk awareness. This development is partly driven by changing laws and regulations and by government-wide developments in the areas of information security, digital continuity, and resilience. Within RVO, there is a need for a coherent approach to IT resilience. This requires insight into the current situation, the key risks and dependencies, the desired development, and the measures needed to further strengthen resilience.

The development does not take place in isolation from the rest of the government. There are various government-wide developments and initiatives in the field of digital resilience. Furthermore, as part of the EZK concern, RVO works closely with EZK. It is therefore important to utilize existing knowledge and approaches, align with relevant government-wide developments, and connect RVO's approach well with that of EZK. RVO is therefore seeking temporary, specialized support to draw up a concrete and actionable PoA for IT resilience over a period of three months.

The goal is not only to deliver a report but, above all, to lay a usable foundation for the further design and strengthening of IT resilience within RVO. Requirements Completed university education Minimum 5 years of demonstrable experience in project or program management, including experience with information security or digital resilience. Demonstrable experience in conducting organization-wide analyses or maturity assessments. Demonstrable experience in translating analyses into a concrete plan, roadmap, or change agenda with priorities and phasing.

Demonstrable experience in gathering and connecting information and interests from different organizational units and management levels. Demonstrable work experience within the Central Government or a Dutch public organization. Wishes Demonstrable knowledge of and/or experience with BIO2, NIS2, and ISO 27001/27002. Demonstrable knowledge of and/or experience with business continuity, incident and crisis management, and recovery capabilities. Demonstrable knowledge of and/or experience with risk management and the design of responsibilities and control measures.

Demonstrable knowledge of and/or experience with government-wide developments and frameworks in the field of information provision, information security, and digital resilience. Demonstrable experience working in a concern or chain context where responsibilities are divided across multiple organizations. A relevant certification or training in project management and/or information security, for example PRINCE2, IPMA, CISM, or CISSP. Hybrid function: working at the office in The Hague or Utrecht, 2 days a week from home. Willingness to travel to different RVO locations.

Competencies Analytical / structured Connecting and convincing Organizationally sensitive Results-oriented, independent, and advisory Additional Information Subcontracting is not allowed. Delivery by Yellow Friday to EZK is via Sogeti. This is not a chain formation/subcontracting, as Yellow Friday executed the tender together with Sogeti and is a formal subcontractor.

• Start: 2026-10-25T23:00:00
• Location: Den Haag Zuid-Holland, NL
• Languages: Dutch