CISO/Director of Security

You are a connecting and steady leader who combines substantive depth in the field of cyber and information security with the ability to move people, teams, and stakeholders. You know how to provide direction in a complex, highly regulated environment and dare to make clear choices when risks, compliance requirements, or cyber threats demand it.

Furthermore, you have:

• Demonstrable WO (university) working and thinking level; preferably a master's degree or demonstrable equivalent level.
• Extensive general work experience and in-depth job-related experience within cyber and information security, preferably more than 6 to 10 years and recent, in a complex or regulated environment.
• Demonstrable leadership experience, including setting performance objectives, managing based on results, reporting on performance, and addressing ownership.
• At least 10 years of demonstrable experience in the role of CISO, Director of Security, or a comparable senior security role, preferably in a financial institution or other complex, supervised organization.
• In-depth knowledge and experience in the field of cybersecurity, including Security & Risk Management, IAM, Security Operations, Network Security, Software Development Security, security frameworks, and regulatory compliance.
• Experience with incident response, security monitoring, risk management, IT policy and process governance, technology and vendor management, awareness, and training.
• Knowledge of continuity and resilience issues, including Business Continuity Management, IT Continuity Management, and Crisis Management.
• Knowledge of relevant developments such as DORA, cloud security, AI, cryptography, and quantum technology.
• Experience with stakeholder management at a senior level, including interaction with the board, regulators, risk, compliance, IT, and business stakeholders.
• Relevant certifications such as CCISO, CISSP, CISA, CISM, CCSP, or CEH.

What do you get from us?:
This position falls into HAY I, with a gross monthly salary between € 8,830.44 and € 13,245.66 (based on 40 hours per week). Furthermore, you receive from us:

• Holiday allowance and a 13th month, at a time that suits you best.
• Lease car
• Based on full-time employment: 232 leave hours per year
• A good collective pension scheme
• € 750 per year to continue your development (to be saved up to € 3,000)
• Every 5 years € 900 to fully organize your home working space again
• An NS-Business Card and a mileage allowance if you come by bicycle
• Curious about the rest? Read everything about our employment conditions here

As CISO / Director of Security at ASN Bank in Utrecht, you combine technical depth with strategic decisiveness. In this way, you build a secure, resilient, and future-proof bank that makes an impact for customers and society.

As CISO / Director of Security at ASN Bank, you hold ultimate responsibility for a clear vision, the bank-wide security strategy, and the demonstrable control of cyber and information security risks. You ensure that infrastructure, systems, and processes comply with relevant laws and regulations, standards, and internal frameworks, and that appropriate security measures are implemented to protect data, privacy, and business continuity.

You determine actionable policies, frameworks, standards, and controls in the field of cyber and information security and ensure that these are prescriptive, fit-for-purpose, and understandable. In doing so, you provide direction for the further strengthening of security governance, security operations, compliance, awareness, and cyber resilience within ASN Bank. You report to the CIO and also have functional reporting lines to the Management Board, Supervisory Board, Regulator (DNB, ECB), and other relevant stakeholders.

• You lead the development and implementation of the security strategy for ASN Bank, anticipate complex issues, threats, and opportunities, and ensure alignment with the broader functional strategy.
• You translate the strategy and objectives of ASN Bank into concrete goals, KPIs, and priorities for your department and manage progress, results, and demonstrable follow-up for bank-wide strengthening of cyber and information security, the management of information security risks, and the increasing of cyber resilience.
• You develop and maintain a robust cybersecurity framework with policies, standards, procedures, and controls for a secure and resilient IT environment.
• You ensure a clear framework of IT and security policies and processes, with clear governance, ownership, roles, and responsibilities.
• You monitor compliance with banking laws and regulations and relevant cybersecurity frameworks such as NIST and ISO 27001 and ensure active follow-up, monitoring, and insight into the compliance status for relevant stakeholders, including the CIO, Executive Board, regulators, and other internal bodies.
• You ensure active follow-up, monitoring, and insight into the compliance status for relevant stakeholders, including the CIO, Executive Board, regulators, and other internal bodies.
• You oversee effective processes for detection, response, and recovery in the event of security breaches and cyber incidents, including incident response plans, lessons learned, and structural improvement.
• You manage the effectiveness and cost-efficiency of security-related technology investments, tooling, and vendor agreements.
• You build and maintain relationships with internal and external stakeholders and represent ASN Bank in the field of cyber and information security.
• You stimulate a security-aware culture within the bank through awareness campaigns, training, and further anchoring of security requirements in processes, systems, and change initiatives.
• You follow strategic developments in areas including cloud security, AI, cryptography, and quantum technology and translate these into relevant frameworks and control measures for ASN Bank.
• You work closely with relevant first-line privacy, risk, compliance, IT, and business functions to protect data, privacy, and business continuity integrally.