Senior Consultant Information Security Supplier Relations

Project overview

What will you do

As a Senior Consultant Information Security Supplier Relations at Evides Water Company, you will translate complex laws and regulations into a workable and auditable approach for information security in supplier relationships and supply chains. You will work within an Evides-wide project and liaise intensively with the client, the external project manager, and stakeholders from ICT, Procurement, Contract Management, Supplier Management, Continuity Management, Privacy, Legal Affairs, and the primary business processes.

You will support Evides in the run-up to the audit on the standards from the Cybersecurity Act, the Critical Entities Resilience Act, and the VEWIN baseline. In doing so, you will help to combine existing frameworks and tools into executable processes, control measures, contract documentation, and audit evidence. It is precisely this combination of substantive depth, broad stakeholder dynamics, and visible impact that makes this assignment attractive.

Responsibilities

Who are you?

You are analytical, connecting, and practical. You know how to clearly communicate specialized subject matter, bring structure to complex issues, and deliver solutions that are not only verifiable but also truly work in practice. You take independent responsibility for your substantive products and work smoothly with various disciplines.

Furthermore, you have:

What else you should know

Scale 12

Hybrid, with sufficient presence at Evides locations for work sessions, coordination, and implementation

Are you a new supplier and have not yet signed a cooperation agreement and a client-specific addendum? This will follow immediately after the award of the assignment.

The following client-specific conditions apply to this assignment for the client Evides:

• analyzing and translating Cbw, Wwke, VEWIN baseline, and relevant standards into applicable requirements
• designing or validating a risk methodology for supplier classification and chain risk analysis
• elaborating information security requirements and contractual provisions for tenders, agreements, and exit arrangements
• facilitating substantive work sessions with involved disciplines within Evides
• supporting risk analyses for critical suppliers, services, systems, and chain partners
• preparing formats, checklists, work instructions, reports, and audit documentation
• guiding pilots and processing findings into the final working method
• demonstrable experience at the intersection of information security, supplier or chain risk management, procurement, and contract management
• demonstrable experience in translating laws and regulations and standards into processes, governance, and contractual requirements
• knowledge of and demonstrable experience with NIS2/Cbw, supply-chain security, and information security in supplier relationships
• experience with risk analyses, supplier classification, and formulating appropriate control measures
• excellent oral and written command of Dutch and availability of an indicative 16 hours per week
• Candidate to be submitted with an all-in rate.
• *In the context of equal pay, you will find the employment conditions of Evides here:*https://hub.driessengroep.nl/m/0dfcd37e-7e4d-4488-846b-2a57f87a6a3f
• Please submit the CV in Dutch.
• If there is sufficient supply, we will close the role earlier than the indicated deadline in the portal. Therefore, submit a suitable candidate as soon as possible.
• It is not permitted to insert an extra link between the candidate and the supplier offering the candidate.
• We would also like to receive a substantiation in the personal motivation demonstrating that the candidate possesses the required competencies.
• The candidate possesses a proof of identity (a passport or identity card), which is valid at intake and on the start date of the candidate's contract and can be presented for inspection.
• The Evides General Terms and Conditions for Water Supply 2026 apply to every assignment.
• The take-over period for flexible workers is 1800 hours.
• Invoicing is based on billable hours.
• Indexation does not apply.
• A valid Certificate of Conduct (VOG) is mandatory for every placement. The costs for this are borne by the supplier/freelancer.
• Upon termination of an assignment

Project details

• Start: 2026-11-16
• Duration: 16 nov 2026 - 16 nov 2027
• Location: Hybride, NL
• Rate: 103-103 EUR/h
• Languages: Dutch