Security Specialist.

Project overview

Client

The College ter Beoordeling van Geneesmiddelen (CBG) assesses and monitors the efficacy and safety of medicines for humans and animals. The CBG also assesses the safety of new foodstuffs for consumers. As an independent authority, the CBG regulates the quality, effect, and safety of a medicine, and promotes its correct use by the right patient. The CBG actively seeks collaboration with patients, doctors, pharmacists, and scientists. The CBG is at the forefront of European developments in this field. Everyone who uses a medicine must be able to trust it.

This is what the CBG works on every day, in the Netherlands and Europe. The CBG is an independent administrative body and is supported by the agency College ter Beoordeling van Geneesmiddelen (aCBG). The aCBG is part of the Ministry of Health, Welfare and Sport (VWS).

Project

The consultant is part of the Information Provision department. For the execution of risk analyses and BIAs, you will work closely with other relevant departments. Reporting and communication will take place according to agreed guidelines.

Assignment Description

Independently perform risk analyses, and BIAs, classify and categorize information, and develop exit strategies. The CBG is looking for temporary support. The activities consist of performing risk analyses, based on the implementation framework for risk assessment of cloud usage by the Dutch government, among others. In addition, the activities include classifying information and categorizing information systems, as well as determining the maximum tolerable data and service loss. Naturally, all this is done with the application owner, for whom you play an important advisory role.

Furthermore, the activities include (supporting the) development of exit strategies, which clearly describe how data will be transferred and destroyed upon termination of agreements with suppliers.

The ideal candidate has extensive experience with risk analyses and BIAs (business impact analyses) in the field of information security. Knowledge of relevant laws and regulations, cloud environments, and experience working in complex organizations are a plus. The consultant is part of the Information Provision department. For the execution of risk analyses and BIAs, you will work closely with other relevant departments. Reporting and communication will take place according to agreed guidelines.

Knowledge, experience, competencies, and skills

• Experience with performing risk analyses. Including based on the implementation framework for risk assessment of cloud usage Implementation framework for risk assessment of cloud usage | Rijksoverheid.nl
• Performing BIAs (Business Impact Analysis).
• Experience with classifying information.
• Experience with categorizing information systems.
• Experience with determining maximum tolerable data and service loss.
• Experience with developing exit strategies. This describes how, upon termination of the agreement, data will be transferred and how it is arranged that the data collection at the supplier is destroyed.
• Knowledge of cloud solutions.

Requirements

1 Candidate possesses a minimum of HBO work and thinking level.

2 Candidate possesses a minimum of 5 years of work experience in a similar role.

3 Candidate is available between November 2026 and March 2027, with possible extension until August 2028 at the latest.

Wishes

1 Degree to which the candidate has experience with (independently) performing risk analyses

2 Degree to which the candidate has experience with performing BIAs and advising owners and developing exit strategies.

3 Degree to which the candidate possesses the required competencies and skills (verifiable in CV, motivation, and/or possible interview).

4 Degree of experience and/or affinity with the client's organization.

Project details

• Start: 2026-11-04T23:00:00
• Location: Utrecht, NL
• Languages: Dutch