INTERIM CHIEF INFORMATION SECURITY OFFICER (CISO)

Job type: Interim

Expertises: Risk

Location: Gelderland | Start: immediately | Duration of assignment: 3 months with possibility of extension

Assignment

For a medium-sized municipality in the province of Gelderland, we are looking for an experienced interim CISO to temporarily strengthen the organisation in the field of information security. The assignment focuses on two crucial trajectories:

Delivering a complete ENSIA audit file and
Drafting a plan of action to comply with the NIS2 directive and the upcoming Dutch Cyber Security Act.

What will you do?

ENSIA accountability process

Coordinate the ENSIA process, including self-assessment, pre-audit and external audit.
Drafting the audit file and supervising the external auditor.
Preparation of reports and advice on information security.

NIS2 & Cybersecurity Act

Conduct a GAP analysis against NIS2 obligations.
Drafting a plan of action for implementation of NIS2 measures.
Advising on governance, risk management, duty of notification and duty of care.
Assist in setting up an Information Security Management System (ISMS).

Who are we looking for?

Minimum 5 years' experience as a CISO or similar position within the (semi-)public sector.
Thorough knowledge of ENSIA, BIO, AVG and NIS2.
Experience with audits, risk management and implementation of ISMS (preferably ISO 27001).
Familiar with municipal processes and administrative accountability.