Project Manager - Roadmap Security

Project overview

ZZP possible, no subcontracting Rate: please offer market-conform Job description For the Municipality of Eindhoven, we are looking for a Project Manager Roadmap Security. Municipality of Eindhoven Information Security & Cybersecurity Are you someone who turns plans into concrete results? Can you bring structure to complex issues, get people moving, and ensure that important improvements are actually realized? Then we are looking for you. Your challenge Digital security is an essential condition for a reliable and future-proof Municipality of Eindhoven.

Our digital services must be available, reliable, and secure. At the same time, cyber threats, dependencies on suppliers, and legal requirements are constantly increasing. That is why we are working on an ambitious security roadmap. Strategic priorities have been set from the CISO organization to structurally improve our digital resilience. But a roadmap alone is not enough. To achieve results, ambitions must be translated into concrete activities, assignments must be prepared, dependencies must be resolved, and progress must be monitored. And that's where you come in.

As Project Manager / Work Preparer Security Roadmap, you form the connecting link between the CISO organization, the IT organization (D&I), the various sectors, and external suppliers. You help the CISO to have security improvements carried out in a planned, structured, and results-oriented manner. What will you do? You combine project management, work preparation, and portfolio coordination. Your main responsibility is organizing, preparing, and monitoring the execution of the security roadmap. 1. Translate security roadmap into executable assignments

• You translate strategic security objectives into concrete projects, activities, and work packages.
• You develop assignments with a clear scope, planning, required capacity, dependencies, and acceptance criteria.
• You ensure that for each activity, it is clear who is responsible, what needs to be delivered, and when.
• You assist in prioritizing activities based on risks, urgency, and available capacity.
• You prepare decision-making, project starts, and assignments to internal teams and external suppliers. 2. Coordinate and monitor execution
• You monitor the progress of the various security projects and improvement measures.
• You organize coordination with IT teams, information security officers, architects, process owners, and suppliers.
• You identify bottlenecks, dependencies, capacity problems, and delays.
• You ensure that agreements are recorded, actions are followed up, and escalations take place in a timely manner.
• You lead defined projects or improvement processes where necessary and hand over the realized results to the responsible management organization. 3. Support the CISO organization
• You maintain an up-to-date overview of the security roadmap, ongoing projects, milestones, and results.
• You prepare progress reports and management information.
• You help the CISO to make visible which measures have been realized, which risks remain, and where managerial decision-making is needed.
• You assist in preparing and following up on consultations with management, project managers, and suppliers.
• You contribute to the demonstrable realization of security measures from, among others, BIO2 and the Cybersecurity Act. What projects will you work on? The security roadmap includes various technical, organizational, and process improvements. For example:
• Identity & Access Management: improving user rights, authorization management, and onboarding, transfer, and offboarding processes.
• Vulnerability and patch management: organizing and monitoring structural improvement measures.
• Security monitoring and incident response: further development of SOC, XDR, logging, and incident processes.
• Backup, recovery, and continuity: improving recovery facilities, restore tests, and crisis preparedness.
• Data protection: implementing information classification, DLP, and secure information usage.
• Asset and configuration management: improving insight into systems, applications, and responsibilities.
• Supplier security: organizing assessments, security agreements, and follow-up of improvements.
• Zero Trust and secure infrastructure: coordinating improvements in network security and access security. You do not have to implement these technical measures yourself. You ensure that the right people, resources, assignments, and conditions are available to execute them successfully. What do you bring? We are primarily looking for a structured, independent, and results-oriented professional who makes complex work manageable and executable. You have:
• HBO work and thinking level.
• Experience with project management, project coordination, work preparation, or portfolio management, preferably within IT or information security.
• Affinity with cybersecurity, IT infrastructure, and digital services.
• Experience with creating project plans, work packages, schedules, and progress reports.
• The ability to bring different disciplines and interests together.
• Strong communication and organizational skills.
• A proactive attitude and the ability to solve bottlenecks independently. It is a plus if you:
• Have experience within a municipality or other government organization.
• Are familiar with BIO, NIS2, ITIL, Agile, PRINCE2, or similar methodologies.
• Have experience with IT security projects or technical improvement programs.
• Are familiar with Microsoft 365, Defender, Sentinel, IAM, or GRC systems. You don't need to be a deep cybersecurity specialist. It is more important that you have sufficient technical knowledge to prepare assignments well, ask the right questions, and enable specialists to collaborate effectively. Who are you? You are someone who:
• Does not get stuck in meetings but turns agreements into actions.
• Creates structure when multiple projects and interests overlap.
• Holds people accountable for agreements made.
• Works independently and does not look to the CISO for every decision.
• Understands political-administrative relationships but acts results-oriented at the same time.
• Escalates in a timely manner when execution or decision-making gets stuck.
• Understands that information security is not just about technology, but primarily about organization, responsibilities, and execution. Your most important quality: you turn things from paper into practice. Your position in the organization You work closely with the CISO and the CISO Office and support the realization of the municipal security roadmap. The CISO, from his independent role, establishes the frameworks, priorities, and security requirements and monitors the progress and effectiveness of the measures. The operational execution and ownership of the measures lie with the responsible line organization, IT teams, and process owners. You ensure the connection between these components. You organize the preparation, coordination, follow-up, and progress monitoring, without taking over the substantive ownership from the executing teams. What do we expect as a result? After your first six months: 1. The security roadmap has been translated into a clear and realistic execution plan. 2. The most important improvement initiatives have concrete assignments, owners, milestones, and delivery criteria. 3. There is structural insight into progress, dependencies, risks, and capacity bottlenecks. 4. Agreements made are demonstrably followed up, and delays are escalated in a timely manner. 5. The CISO has reliable, periodic management information on the execution of the security roadmap.

Project details

• Start: 2026-11-30T23:00:00
• Location: Eindhoven Noord-Brabant, NL
• Languages: Dutch