YOU RECOGNIZE YOURSELF IN THE FOLLOWING:

• 6-9 years’ experience in Cybersecurity, Information governance and Financial Services is desired;
• Strong in stakeholder engagement and influence, reaching alignment on the best way forward in stakeholder groups with differing perspectives;
• Good experience analyzing security threats and risks from a business perspective, and the measures needed to mitigate them, both at organizational and technical level;
• Knowledge of existing approaches and experience defining security governance structures, processes, and operating models;
• Knowledge of methods, best practices and standards in the field of security, such as NIST CSF, ISO27k, DNB GP, DORA and guidelines from EBA, EIOPA and ESMA;
• Broad experience/exposure to different security domains with deep knowledge on some (we do not place specific requirements on which areas you need to have depth in);
• Excellent communication skills, ability to provide structure and communicate complex terms in clear simple language, both orally (conversations, presentations) and written (writing of sound reports, appropriate to the target group and tailored to the needs of the client);
• You have a BSc, MSc or equivalent degree;
• You have excellent command of English (must have) and Dutch (strong preference);
• Prior experience in a CISO support, security operations, three lines of defense, security strategy, or security product management role is a plus.

As a security strategy manager, you work with our financial sector clients to define the key strategic imperatives for security, translate them into initiatives to be implemented and design the right organization structure (security operating model) to enable execution of these initiatives. You manage the consultants in your team to get the job done. Working together with the senior executives of our clients, you help ensure that security serves as an enabler to the rest of the organization and help gain visibility on the effectiveness of security through facilitation of management insights and reporting.