Senior Programmamanager Cybersecurity NIS2 Audit (NL)

Context

Senior programmamanager with an exceptionally strong combination of cybersecurity expertise, audit knowledge, and program management experience, specialized in NIS2 compliance, governance, and complex change programs within public and regulated organizations.

The role involves setting up, managing, and monitoring organization-wide programs around cyber and information security, with a strong focus on NIS2 compliance, audit trajectories, and governance. It combines strategic program management with deep substantive expertise in information security, privacy, risk management, and audit. The program manager translates legislation, standards, and audit findings into concrete roadmaps, priorities, and improvement programs, managing these across multiple projects, teams, and stakeholders.

The program manager acts as a bridge between IT, security, privacy, audit, business, and management, serving as a credible interlocutor at both operational and policy levels.

Missions

• Design, manage, and monitor NIS2 programs and compliance roadmaps

• Program management of cybersecurity, information security, and audit trajectories

• Coordinate NIS2 assessments, maturity measurements, and gap analyses

• Set up and monitor governance and reporting structures

• Lead and coordinate internal teams and external consultants

• Coordinate and follow up on internal and external audits (ISO, ISAE, SOC, etc.)

• Translate audit results into actions, improvement plans, and policy adjustments

• Align cybersecurity, privacy (GDPR), and business continuity initiatives

• Report to management, steering committees, and supervisory bodies

• Monitor risks, scope, dependencies, budget, and planning at the program level

Tools & Environment

• Project management techniques and tools (risk management, issue management, etc.)

• ITIL knowledge

• PM methodologies terminology, organization, roles, and processes (e.g., Prince2, PMBok), preferably certified

• Program management methodologies (e.g., Agile, Scrum, MSP), preferably certified

• Knowledge of ISO/IEC 27000-series, ISO 31000, ISO 29100, CIS Controls, NIS/NIS2, DORA

• Audit methodologies and audits (ISO27001 implementation and audit, ISAE 3402, SOC1, SOC2, COBIT, SOX)

• Experience with audit follow-up and implementation of improvement measures

• Knowledge of MITRE ATT&CK, OWASP, SABSA, TOGAF, SAMM (recommended)

Working Conditions

• Title: P1 - RO Programmamanager Cyber/NIS2/Audit

• Customer reference: -

• Last application date: 29/10/2026

• Preferred start date: 12/05/2026

• Preferred end date: 15/07/2027

Additional Information

• Maximum rate according to price agreements table

• Contract duration can be extended by mutual agreement in 12-month periods within the framework agreement of the Facility Company

• Price adjustments not allowed, except indexation after every 12 months

• Termination by contractor or client possible via registered letter with 1 month notice period

• Attachments with offer: IT code, NDA, CV of proposed candidate (as one zip file)

1. Proven experience as a Programmamanager, leading programs related to infrastructure or development projects
2. Experience with project management techniques and tools (risk management, issue management, etc.)
3. Knowledge of ITIL
4. Experience with terminology, organization, roles, and processes of PM methodologies (e.g., Prince2, PMBok), preferably certified
5. Knowledge and experience with program management methodologies (e.g., Agile, Scrum, MSP), preferably certified
6. Fluent Dutch language skills at European CEFR level C2
7. Thorough knowledge of ISO/IEC 27000-series, ISO 31000, ISO 29100, CIS Controls, NIS/NIS2, DORA
8. Extensive experience in the public sector, government, and regulated environments
9. Strong communication skills (trainer, public speaker)
10. Minimum 5 years experience as a Programmamanager in infrastructure or development projects (senior level)
11. Minimum 10 years experience as CISO/security officer/GRC responsible (expert level)
12. Minimum 15 years experience in cybersecurity and information security (expert level)
13. Minimum 10 years experience in infrastructure or development projects (senior level)
14. Experience with audit methodologies and audits (ISO27001 implementation and audit, ISAE 3402, SOC1, SOC2, COBIT, SOX)
15. Experience with audit follow-up and implementation of improvement measures
16. Experience setting up multi-year programs and managing multiple parallel projects with diverse stakeholders (IT, business, legal, audit, management)
17. Strong knowledge of NIS2 (assessments, readiness analyses, roadmaps, incident management)
18. Willingness to sign IT-Code and NDA
19. Experience as CISO and/or DPO and/or Trusted advisor for management and supervisory bodies (recommended)
20. Experience with GDPR implementations, DPIAs, privacy governance, and data governance (recommended)
21. Experience with project management techniques and tools (risk management, issue management, etc.) (recommended)
22. Experience with terminology, organization, roles, and processes of PM methodologies (e.g., Prince2, PMBok) (recommended)
23. Knowledge of ITIL (recommended)
24. Knowledge of program management methodologies (e.g., Agile, Scrum, MSP) (recommended)
25. Knowledge of MITRE ATT&CK, OWASP, SABSA, TOGAF, SAMM (recommended)