Chief Information Security Officer (CISO)

Experience& expertise

• Extensive experience (5+) as a consultant, advisor, or CISO in the field of information security, preferably within healthcare or government;

• Demonstrable experience in designing and improving information security processes;

• Thorough knowledge of NEN 7510, ISO 27001;

• Experience with risk analyses, audits, and certification processes;

• A CISM training or similar certification is a plus.

At Beter Healthcare, you will enter a work environment centered on growth, trust, and collaboration. You can count on:

• A good salary that we determine based on your knowledge and experience;

• Strong secondary benefits, such as a lease car, bonus scheme, pension, and of course a laptop and phone;

• Varied assignments at different healthcare organizations in the Netherlands;

• Knowledge groups, intervision, and development opportunities to continue learning continuously;

• Interactive quarterly meetings with colleagues at inspiring locations where engagement is central;

• An expert team of healthcare consultants who are always ready to think along with you;

• Space to spar with other recently started colleagues within the onboarding team;

• An active staff association for those who enjoy doing things together.

Do you want to help healthcare organizations structurally raise information security and privacy to a higher level? Do you enjoy working at the intersection of strategy, governance, and execution, in a sector where trust and security are essential? Then this role as Chief Information Security Officer (CISO) is for you.

As CISO, you support Beter Healthcare's clients in strengthening and professionalizing their information security and privacy strategy. You work on both strategic and operational issues and help organizations design, improve, and safeguard their information security policies and processes. As a consultant, you temporarily fulfill the role of CISO and act as a strategic advisor to boards and management.

You will work on diverse assignments, such as drafting and revising information security policies, performing risk analyses, implementing NEN and ISO standards, and guiding audits and certification processes. In doing so, you are the connecting link between the board, management, IT, and healthcare practice.

• Advising healthcare organizations on information security and privacy, with a focus on strategy and governance;

• Temporarily filling the CISO role or acting as a strategic sparring partner for boards and management;

• Drafting and improving information security policy frameworks and processes;

• Guiding audits and certification processes (e.g., NEN 7510, ISO 27001) from a strategic perspective;

• Supporting compliance with laws and regulations such as GDPR and NIS2 at a strategic level;

• Increasing awareness and commitment at the board level for information security and privacy.

Every assignment is different, which requires flexibility and curiosity. You will work at various client locations throughout the Netherlands, sometimes from home, and sometimes at one of our office locations. You will be given the space to organize your work in a way that suits both you and the organization.

You are an experienced CISO who feels comfortable in complex environments where information security, laws and regulations, and organizational interests converge. You naturally take the lead and know how to provide direction without losing the connection to people and practice. In your role, you combine oversight with decisiveness and know how to help organizations step by step in strengthening their information security.

You quickly grasp how a healthcare organization is structured and have an eye for both formal structures and underlying dynamics. Because of this, you know how to weigh interests effectively and tailor your approach to the context in which you work. Whether you are interacting with executives, management, ICT, or healthcare professionals: you communicate clearly, persuasively, and with a sense for the target audience, and you know how to make complex security issues understandable.

In terms of content, you quickly get to the core of the matter. You analyze risks and vulnerabilities carefully and translate them into concrete, appropriate measures. You work in a structured manner, substantiate your advice, and maintain oversight, even when multiple themes or interests are at play simultaneously.

At the same time, you look beyond the short term. You understand how information security contributes to the strategic objectives of an organization and help in making choices that are also sustainable in the long term. You know how to connect strategy to execution and contribute to the sustainable safeguarding of information security within the organization.