Chief Information Security & Privacy Officer

0.8 - 1 fte week | Utrecht | Hybrid | HBO/WO

As Chief Information Security & Privacy Officer at Berenschot, you are responsible for identifying and interpreting risks in the field of information security and privacy. From a second-line role, you work closely with the Information Security & Privacy Officer (ISO/PO), the Data Protection Officer (DPO), and with IT colleagues. You support the first line (our advisory groups) in fulfilling their responsibilities regarding information security and privacy. You ensure the frameworks within the organization and oversee compliance with them. You promote awareness and knowledge of information security and privacy within the organization and support risk analyses and assessments. You also provide support during incidents.

Berenschot is looking for a Chief Information Security & Privacy Officer. Are you an expert in the field of information security and privacy and do you want to build a strong internal organization in this area together with colleagues? Then we are looking for you.

The following tasks belong to the position:

• Drafting and maintaining the information security policy and the privacy policy.

• Periodically reporting on information security and privacy to the board and management.

• Ensuring compliance with relevant standards, laws, and regulations and maintaining the Information Security Management System (ISMS).

• Promoting awareness and knowledge in the field of information security and privacy within the organization.

• Performing risk analyses and DPIAs.

• Coordinating and advising on information security incidents and data breaches.

• Supporting the first line in the field of information security and privacy.

• Monitoring information security in the chain, including testing external suppliers on security measures.

• Providing requested and unrequested advice to the organization.

As Chief Information Security & Privacy Officer (CISO/PO) at Berenschot, you are expected to possess:

• HBO working and thinking level; including in the fields of security management, public administration, or business administration.

• At least five years of experience in a position in the field of information security.

• Subject-matter knowledge in the fields of risk management, technology, organization, and processes.

• In-depth knowledge of relevant legislation and standard frameworks including GDPR, BIO, ABRO, NIS2, NEN7510, and ISO 27001;

• Strategic, tactical, and operational knowledge and skills.

• Analytical and communicative skills.

• Persuasiveness and leadership.

• Stakeholder management and organizational sensitivity.

Certifications such as CISSP, CISM, CISA, CISM, CIPP/E, CIPM, and CDPO are a plus. In any case, we would like you to want to master these.

At Berenschot, we offer a unique commercial environment without shareholders or partners. This gives us a lot of space and freedom to take initiative and the opportunity to commit ourselves to important social themes. Our informal culture is characteristic. Berenschot is a flat organization with short communication lines where you are truly listened to. There are plenty of opportunities for personal and professional growth, where your initiative is embraced and facilitated. You have the freedom to take initiative here. Our diverse and inclusive personnel policy embraces diversity and offers everyone equal opportunities.

Of course, we also have excellent employment conditions and great development opportunities:

• a one-year contract, with the absolute intention to offer you a permanent contract after one year

• an attractive market-conform salary tailored to your knowledge and experience

• Holiday allowance; 8% of the gross salary.

• a regular collective profit-sharing scheme (depending on the results of the company)

• an attractive pension scheme

• 27 vacation days, with the possibility to purchase a maximum of 20 additional vacation days in the case of full-time employment

• flexible holidays. We offer the possibility to shift official holidays to days that are meaningful to you.

• a laptop and phone

• an NS business card or a mileage allowance of € 0.25 per km

• home office allowance of € 2.35 per day

• the freedom to determine where and when you work, in consultation with your colleagues

• plenty of room for development through internal and external training