Information Security Manager

Information Security Manager

What you will do as Information Security Manager

As Information Security Manager, you are accountable for establishing, leading and maturing Haskoning’s central Information Security function. You define the strategy, set the governance and ensure that policies, standards and controls are effectively embedded in a risk-based and business-aligned manner across the organisation.

This first-line security leadership function is responsible for execution and day-to-day risk management, in close alignment with second-line Risk & Compliance and third-line Internal Audit.

This function leads a newly established team and is expected to significantly increase cyber maturity within 18 – 24 months, focusing on strengthening security fundamentals, improving detection & response and embedding security across business and IT.

Key responsibilities

• Define and execute the information security strategy, roadmap and maturity improvement plan.
• Establish and own governance, policies, standards and control frameworks, aligned with a practical NIST-based approach.
• Translate risk appetite into practical, defensible security decisions for business and IT.
• Build and lead a high-performing security team from the ground up, providing clarity, direction and accountability.
• Act as senior advisor to executive leadership on cyber risk, resilience, investment priorities and major security decisions.
• Ensure strong cooperation with Enterprise IT & Services, IT Operations & Service Management, external providers including TCS, Facility Management, Business Lines and second-line Risk & Compliance.
• Oversee third-party and supply chain security expectations and ensure customer-facing security credibility.
• Act as final escalation point for major cyber risks and incidents and drive measurable improvement through KPIs and reporting.
• Strengthen security culture and awareness organisation-wide.

Where you will work

At Haskoning, you will join an independent, employee-owned international consultancy that combines engineering, design, and consultancy services with software and technology. Our mission, "Enhancing Society Together," drives us to create a positive impact on the world.

We offer purpose-driven and challenging work in diverse international projects, leveraging our 140+ years of expertise. With over 6,800 employees in more than 25 countries, we work together to turn challenges into opportunities and make a real impact on society. We collaborate with leading clients in markets such as infrastructure, climate resilience, renewable energy, decarbonisation of industry, and sustainable mobility.

As our new Information Security Manager, you will become part of the corporate group Digital & Workplace Solutions (DWS) in the Netherlands. DWS provides services to the internal organisation, enabling colleagues to serve their clients in the best possible way.

DWS’s activities are divided across three domains: Enterprise IT & Services, Real Estate & Facility, and Digital & AI. In addition, there is a separate team for information security. The structure of DWS was recently reorganised to allow the three domains to come into their own more effectively. As a result, several new roles have been created, including that of Information Security Manager.

This role will be part of the Information Security team, which we are building to professionalise cyber security and significantly increase organisational maturity. The team operates as a first-line security function and works closely with Enterprise IT & Services, IT Operations & Service Management, external providers, Facility Management, Business Lines, Corporate Groups and second-line Risk & Compliance. The team works pragmatically and risk-based, aligned with the NIST framework.

What you bring

• Extensi