Senior Advisor Information Security / SOC Strategy - DICTU

Project overview

Assignment Description

The assignment involves independently developing and delivering a substantiated proposal for the setup and further development of the central Security Operations Center (SOC). The goal is to establish a target state for SOC services to be presented to the CIO council for decision-making. After decision-making, the SOC will be further realized.

The contractor will start from existing SOC initiatives, DICTU's current service provision, ongoing developments, and the conclusions from the KPMG study. This will determine which facilities are already usable, which components are still missing, and which decisions are necessary.

The assignment includes elaborating a proposal for governance, including role distribution, responsibilities, demarcation, and agreements between a generic central SOC and decentralized SOC components. Furthermore, the needs of different service departments will be analyzed and translated into requirements articulation and a functional design for generic SOC services, aligned with best practices. Finally, a GAP analysis will be performed between the existing central SOC services and the desired functional design. Based on this, a prioritized roadmap will be developed for realizing the necessary improvements.

The assignment will be executed independently, iteratively, and results-oriented, with the contractor responsible for the agreed-upon results and delivery deadlines.

Background Assignment

DICTU provides ICT and digital services for the Ministry of Economic Affairs and other parts of the Dutch central government. Within the organization, there is a need for a coherent SOC ecosystem in which central and decentralized security facilities cooperate effectively. The future SOC should make maximum use of existing facilities and building blocks. Clear agreements must be made regarding governance, roles, responsibilities, financing, and service provision within the broader information ecosystem.

A significant part of the assignment is determining the scope of the SOC. Various scenarios will be investigated, ranging from a minimal central framework layer with governance and a concern-wide overview to a joint SOC service with additional responsibilities for logging, monitoring, and incident response. A broader security framework involving high-risk applications, application chains, and additional security processes will also be considered.

The functional design includes security monitoring, log management, security incident management, security analysis, digital forensics, threat intelligence, threat hunting, and vulnerability management. A clear distinction must be made between the functional SOC processes and the technical facilities that support these processes.

Requirements

Desirables

Competencies

Additional Information

An offered CV must contain the candidate's full name and address, date of birth, phone number, and email address.

Work Situation: Re-contracting is not permitted. Exclusivity is required upon acceptance of an invitation for intake until 4 days after the intake date.

• More than 10 years of work experience at C-level within the information security domain, demonstrably supported by concrete examples in the CV.
• More than 5 years of demonstrable work experience in business development roles, substantiated with concrete examples in the CV.
• Demonstrable experience in advising on SOC ecosystems.
• Demonstrable experience working in complex ecosystems with multiple organizations that have their own and centralized IT and SOC environments in various stages of development.
• Collaboration and effective connection of different organizations, stakeholders, and interests.
• Strong advisory skills and the ability to translate complex issues into concrete proposals for strategic and administrative decision-making.
• Project management skills, including planning and organizing work to deliver agreed-upon results on time for approval in formal meetings.
• Analytical ability and the capacity to structure complex information security issues.
• Organizational sensitivity and insight into administrative and organizational relationships within complex collaborations.

Project details

• Start: 2026-11-01T23:00:00
• Location: Den Haag Zuid-Holland, NL
• Languages: Dutch