Managing Security Consultant (Crisis Management)
Summary
Lead cyber crisis management engagements, design crisis exercises, and advise clients on resilience strategies using frameworks like ISO 27001 and NIST.
As a Managing Security Consultant specialising in Cyber Crisis management, you will help organisations strengthen their ability to prepare for, respond to, and recover from cyber incidents.
- Deliver client engagements as lead consultant and/or part of a team
- Design, develop and facilitate operational, tactical and strategic cyber crisis readiness exercises
- Conduct risk assessments, cyber crisis management assessments and resilience reviews, providing actionable recommendations and improvement roadmaps
- Manage or collaborate with IT and development teams to integrate security practices into the business processes
- Creating reports or presentations for clients
- Advise management on high level security strategies.
- Draft independently security policies, guidelines, and control frameworks in alignment with regulatory requirements
- Strong knowledge and practical application of cyber crisis management, cyber resilience and organisational response frameworks
- Understanding of incident response, crisis management, business continuity and recovery principals within resilience programmes
- Ability to design and validate cyber response plans, crisis management plans and cyber playbooks
- Understanding of security protocols, authentication, authorization, and security vulnerabilities;
- Basic knowledge with security frameworks (e.g., ISO 27001, NIST, NIS2, DORA) and compliance requirements (e.g., GDPR, HIPAA);
- Proven experience designing, facilitating and evaluating cyber crisis exercises including; crisis exercises, tabletop simulation and executive-level exercises
- Understanding of incident response, crisis management, business continuity and recovery principals within resilience programmes
- Ability to design and validate cyber response plans, crisis management plans and cyber playbooks
- Understanding of security protocols, authentication, authorization, and security vulnerabilities;
- Basic knowledge with security frameworks (e.g., ISO 27001, NIST, NIS2, DORA) and compliance requirements (e.g., GDPR, HIPAA);
Personal Skills
- Analytical and critical thinking abilities;
- Effective communication skills (written and verbal, both internal and external facing) across various levels of an organization;
- Dutch language verbal en writing
- Collaboration and teamwork within multi-disciplinary teams;
- Project management skills for client projects;
- Time management and the ability to handle multiple projects simultaneously;
- Reporting & Presentation skills for external presentations to clients after a project;
- Commercial awareness
Certifications are an advantage
- CISM, CISSP for C&I consultants.
- A good salary that matches the things you have already done and will do;
- Flexible working hours and flexibility in working from home or at the office, allowing you to optimally combine your private life with your work;
- A favorable pension scheme, 26 vacation days (+4 mandatory days off), and 8% holiday pay with a full-time contract;
- Plenty of development opportunities: you can gain and share knowledge through training, TechTalks, events, and our own Fox Academy;
- A laptop and business phone. If you use your own phone, you will receive a reimbursement of up to €25 per month;
- A remote work allowance (for hybrid working);
- A performance bonus and profit sharing because we value your effort;
- When we work in the office, we gather every day for a delicious lunch.