Senior Risk Management Consultant

Project overview

Assignment Description Assignment: Senior Risk Management Advisor (Project-based support for process professionalization) For the GRC team, we are looking for an experienced external Senior Risk Management Consultant to achieve the following project objectives:

The consultant is responsible for advising on and achieving the following results:

To support the further development of Business Projects, the consultant provides specialist expertise in the field of:

The consultant will work independently on the above objectives. Progress will be discussed periodically with the IT Manager GRC to align the delivery of agreed-upon results.

Profile:

Given the complexity of the environment, experience with methodologies within Defense and in-depth knowledge of specific business processes and risk management are required to achieve the desired results within the given timeframe.

Background of the assignment

With the end of Program Roger, external hiring of System Integrators and Management Parties will also end. The assignment focuses on ensuring and professionalizing the results from Program Roger. The consultant provides specialist expertise to ensure the transition of project-based knowledge to regular GRC processes.

Generic description of competence area and levels

Implements risk management across information systems by applying the risk management policy and procedures defined by the company. Assesses the risk to the business organization, including web, cloud, and mobile resources. Documents potential risk and containment plans.

Summary of task and mission

Ensures the implementation of the organization's information security policy through the safe and correct use of ICT resources. Defines, establishes, and implements necessary information security techniques and practices in accordance with information security standards and procedures. Contributes to security practices, awareness, and compliance through advice, support, information, and training.

• Optimization of Governance, Risk & Compliance (GRC) processes
• Designing and implementing improved internal control processes for the GRC team.
• Shaping the knowledge transfer and process-based assurance of the transition from 'Program Roger' phase to the regular organization.
• Strengthening the professional standard within GRC by developing methodologies, training, and supporting tooling.
• Identifying and implementing process improvements that increase efficiency within and outside the team.
• Strategic advice on risk assessment and control
• Advising on risk assessments and formulating effective control measures.
• Providing specialist support for complex risk issues requiring specific methodological knowledge.

Responsibilities

Requirements eCF profile: Information Security Specialist Reference Area: E.03 Risk Management

This assignment is based on the European e-Competence Framework (e-CF). This is a European standard for describing IT competencies and the associated level of responsibility. The eCF profile indicates which competencies and at what level (e-1 to e-5) are expected from the candidate. We expect candidates to clearly demonstrate that they possess these competencies in their CV. This can be done by describing for each relevant assignment or position:

CVs in which the requested eCF competencies are not demonstrably present cannot be fully assessed for suitability.

Additional Information

Hybrid working

Frequency of days working from home

On-call services

• Evaluate information security risks, threats, and consequences and take appropriate measures
• Provide training and information on information security
• Provide technical validation of security tools, implement, configure, and manage suitable tools
• Contribute to the definition of and actively promote standards and procedures for information security in the IT and IT user communities
• Identify and remediate security vulnerabilities
• Monitor security developments to ensure the continued efficiency and effectiveness of information security processes and controls
• Proactively evaluate new threats and anticipate potential information security incidents
• Implement security techniques on all or part of an application, process, network, or system within the domain of responsibility
• the role the candidate fulfilled
• the work and responsibilities involved
• the extent to which these align with the requested eCF competencies and level
• The candidate has at least 3 years of demonstrable work experience with the chosen eCF profile-like function.
• The candidate preferably has demonstrable work experience within the Ministry of Defense.
• The candidate preferably has demonstrable work experience with SAP

Project details

• Start: 2026-10-25T23:00:00
• Location: Bunnik Utrecht, NL
• Languages: Dutch