Risk & Information Security Manager

• A salary appropriate to your work experience and the challenge of this position
• 27 vacation days and 13 ADV days
• An excellent pension scheme
• An annual VDL party with all colleagues from VDL Group
• Various collective arrangements and staff offers
• Participation in sports activities

What will you do?

As Risk & Information Security Manager, you are responsible for developing, implementing, and monitoring the integrated security and risk framework within our high-tech environment. You focus primarily on digital safety and information security, as our customers share critical information with us. You ensure that this information is securely received, processed, stored, and exchanged according to the highest standards.

You work closely with the CISO of VDL Netherlands, the central security organization within the VDL Group, and colleagues in engineering, IT, operations, and supply chain. You have a sharp eye for risks, compliance requirements, and opportunities for improvement, and you know how to translate these into concrete measures and policies that are supported across the organization.

• Developing, managing, and implementing the integrated Security Management System, including the ISMS in accordance with ISO 27001.
• Translating business goals and customer requirements into clear, effective, and future-proof security policies, guidelines, and procedures.
• Drafting customer-specific security plans and ensuring that all security requirements are demonstrably complied with.
• Defining access rights and secure process flows from engineering to production, aimed at secure information transfer, processing, and storage.
• Coordinating internal and external audits (including ISO 27001, ABDO, customer assessments).
• Advising management on strategic security issues and risk management.
• Responsible, together with Facility, for physical access management and the monitoring of our premises.
• Monitoring export control and security compliance in collaboration with procurement and legal teams.
• Stimulating security awareness and knowledge development within the organization.
• Developing and maintaining the business emergency and continuity plan.

For this role, we are looking for an experienced professional who maintains an overview, provides direction, and can steer firmly on substance. You are analytically strong, communicatively skilled, and know how to clearly translate complex security issues into policy and practical measures. Additionally, you bring the following: