Senior Information Advisor Identity and Access Management

Project overview

Possibility for freelancers, no subcontracting.

Project details

between 85 and 95 per hour. Assignment Description. Introduction and Background. Currently, Identity & Access Management (IAM) within the Province of Noord-Brabant is not structurally embedded within the organization. Current legislation (such as AVG, BIO, etc.) requires that access to systems, applications, and data is regulated, with the aim of providing access where necessary and mitigating risks where necessary. In an earlier stage, a project plan was delivered on behalf of Human Capital, which is now being followed up.

Objective. The objective of establishing Identity & Access Management at the Province of Noord-Brabant is:

Security of information: preventing unauthorized access to sensitive data (personal data or confidential data), protecting against data breaches and misuse (privacy legislation).

Mitigating risks by securing information (according to BIV): Access is aligned with roles (being in control), minimizing damage from errors or malicious actions.

Supporting business operations: users (both internal and external) must be able to do their work efficiently, access must be arranged quickly and appropriately. This also includes control over license costs.

Control and compliance: complying with applicable laws and regulations, the ability to check who did what (logging and monitoring).

Management and overview (insight into who has access to which systems) and thus being able to easily adjust rights upon hiring, job change, or departure. Including the ability to regularly check if the right people have access.

Funds have been obtained from the Policy Framework addendum that are necessary to further shape and implement IAM within PNB. The focus for the coming six months is on a concrete roadmap and impact analysis, in which the ambition, scope, target group, and impact on the organization become clear. Furthermore, the roadmap and impact assessment provide direction for the steps that must be taken before implementation begins.

Result of the assignment: Roadmap Identity & Access Management with organization-wide impact analysis. The IAM assignment focuses on establishing future-proof Identity & Access Management in which functions, roles, responsibilities, and separation of duties are standardized organization-wide. The contractor will deliver the following concrete results:

A concrete roadmap with ready-to-start project assignments, both organizational and technical, that fits the organization's maturity level. Consideration will be given to relevant ongoing projects that impact or support this initiative.

Candidate Profile. Knowledge and Skills:

Competencies:

Interview Planning. We aim to hold the interviews on November 10, 2026.

Explanation of Schedule. Work activities approximately 3 days per week at the office.

Wishes.

Interview. For this assignment, after the first selection round, interviews will be conducted with several parties. These will be taken into account in the final assessment. These interviews will be assessed according to the criteria indicated below. During the job interview, the last (maximum) 25 points can be awarded. These 25 points are divided as follows:

• A concrete description of PNB's ambition in the field of IAM that is appropriate for the organization and its tasks. With attention to a substantiated choice for a chosen model for role assignment, taking the scope into account. An IAM policy and governance framework.
• The scope that PNB will use for implementing IAM: In terms of systems and applications. In terms of data and files. In terms of IT infrastructure. In terms of target group, both internal and external.
• An impact analysis that provides insight into the AS-IS and TO-BE situation. Based on this, a conclusion will be written about what still needs to be prepared/delivered in the coming years to achieve implemented and secured IAM according to the established ambition and scope. The impact analysis will include at least the following components:
• The organizational impact. To what extent is there currently a clear organizational structure, standardized functions, and a clearly standardized process of inflow, transition, and outflow. In order to define access roles and authorizations based on this. But also consider contract and service data and separation of duties.
• Process impact: Globally, which work processes need to be set up. Which processes need to be adjusted?
• Technological impact: A proposal on the use of existing facilities versus additional IAM tooling that is required.
• People and behavior: What change is necessary in working methods, training, and adoption.
• Inventory of the most important risks and prerequisites for establishing IAM. Including an investment budget (financial/ FTE incidental/structural). Additionally, a brief study on how other provinces/municipalities handle access management and what lessons have been learned.
• Specifically deliver a target architecture for IAM. PNB will contribute to this through the information architect under the leadership of the senior IAM advisor. With attention to the following aspects: Identity Governance, Authentication, Authorization Management, Privileged Access Management, Directory Services, Federated & External links, Compliance & Audit, Identity Security Operations.
• Knowledge of and experience with Identity & Access Management (IAM).
• Experience with and knowledge of authorization models.
• Knowledge of Identity Governance, Privileged Access Management (PAM), authentication, and authorization.
• Knowledge of and experience with inflow, transition, and outflow processes.
• Performing AS-IS and TO-BE analyses.
• Developing roadmaps and project assignments.
• Advising management and directors.
• Experience with stakeholder management.
• Assertive and decisive.
• Environmentally aware and connecting.
• Able to effectively separate main and minor issues.
• Manages and monitors progress, risks, and dependencies.
• Communicates clearly, concretely, and purposefully both orally and in writing.
• People- and results-oriented.
• Strong analytical skills and able to approach issues from an integrated perspective.
• Candidate has at least 5 years of experience (in the last 10 years) with developing roadmaps, AS-IS and TO-BE impact analyses, and project assignments in the field of comparable ICT-related projects. This must be evident from the CV.
• Candidate has at least 5 years of experience (in the last 10 years) with preliminary research for the implementation of Identity & Access Management (IAM) and authorization models, preferably within a decentralized government (large municipality >500 FTE or province). This must be evident from the CV.
• Candidate has at least 5 years of experience (in the last 10 years) with research into and implementation of Identity Governance, Privileged Access Management (PAM), and inflow, transition, and outflow processes, preferably within a decentralized government (large municipality >500 FTE or province). This must be evident from the CV.
• Experience with the relevant position/activities, related to the ability to connect with the described challenges at the province: maximum 10 points.
• Match with the team (sufficiently complementary in knowledge and collaboration): maximum 5 points.
• Competencies such as connecting, meticulous, focused, reliable: maximum 10 points.
• Start: 2026-11-15T23:00:00
• Location: 's-Hertogenbosch Noord-Brabant, NL
• Languages: Dutch