Information Security Business Advisor (BISO)

Information Security Business Advisor (BISO)

What you will do as an Information Security Business Advisor

As Information Security Business Advisor, you act as the primary interface between the central security team and the business. You translate security requirements into practical, proportionate and business-aligned actions and help managers and teams make informed risk-based decisions.

This function helps the organisation operate, change and innovate securely by embedding risk-based security into daily decision-making.

Key responsibilities:

• Advise Business Lines and Corporate Groups on information security risks, requirements and priorities.
• Translate central security policies and standards into clear and practical business guidance.
• Support projects, supplier engagements and business initiatives early in the lifecycle.
• Identify and access risks and discuss proportionate mitigation options, including acceptable trade-offs.
• Support prioritisation of security improvements and investments in business context.
• Ensure alignment between central security and business execution.
• Contribute to customer-facing security credibility and supplier / third-party requirements.
• Embed security awareness and behaviour in day-to-day operations by explaining why security matters in practical terms.
• Build trusted relationships with managers, experts and teams across the organisation.

Where you will work

At Haskoning, you will join an independent, employee-owned international consultancy that combines engineering, design, and consultancy services with software and technology. Our mission, "Enhancing Society Together," drives us to create a positive impact on the world.

We offer purpose-driven and challenging work in diverse international projects, leveraging our 140+ years of expertise. With over 6,800 employees in more than 25 countries, we work together to turn challenges into opportunities and make a real impact on society. We collaborate with leading clients in markets such as infrastructure, climate resilience, renewable energy, decarbonisation of industry, and sustainable mobility.

As our new Information Security Business Advisor, you will become part of the corporate group Digital & Workplace Solutions (DWS) in the Netherlands. DWS provides services to the internal organisation, enabling colleagues to serve their clients in the best possible way.

DWS’s activities are divided across three domains: Enterprise IT & Services, Real Estate & Facility, and Digital & AI. In addition, there is a separate team for information security. The structure of DWS was recently reorganised to allow the three domains to come into their own more effectively. As a result, several new roles have been created, including that of Information Security Business Advisor. This role will be part of the Information Security team, which we are building to help the organisation operate, change and innovate securely. The team works as a first-line function and closely cooperates with Business Lines, Corporate Groups, Enterprise IT & Services, Facility Management, suppliers and Risk & Compliance.

What you will bring

• Experience in BISO, information security advisory, cyber risk or business-facing security roles.
• Strong stakeholder management and influencing skills.
• Able to explain complex security topics in simple, practical language.
• Empathetic, credible and able to engage both managers and operational teams.
• Strong written and verbal communication in Dutch and English.

Education and certifications

• Completed relevant education (Bachelor's/ Master's degree) in information security, IT, business, governance or risk.
• Certifications such as CISSP, CISM, CRISC, ISO 27001 or equivalent are preferred.
• Good understandin