About this role
For the Eindhoven University of Technology (TU/e), we are looking for a Cyber Risk Manager. Please note: In the context of the Dutch Deregulation Assessment of Employment Relationships Act (Wet DBA), this assignment can only be carried out on a secondment/payroll basis. ICQ Groep offers various employment solutions for this purpose. You can expect an attractive salary package and excellent employment conditions. Please visit: https://www.icq-groep.nl/over-icq/nieuws/actueel/update-wet-dba-wij-zijn-er-klaar-voor-jij-ook The Eindhoven University of Technology (TU/e) is within scope of the NIS2 directive and has strategically committed to achieving ISO27001 compliance maturity in the coming years. This requires a solid cyber risk management process that is integrated in the overall risk management capability. At this point in time the (cyber) risk management capacity is very limited. The transformation required for NIS2 & ISO27001 requires more capacity & expertise in be ready before July 2028. TU/e consists of various departments, where education and research are conducted, and a number of support services. You will be part of the GRC team within Library and Information Services (LIS) organization. This team will play a prominent role in implementation of cyber risk management, ISO27001 certification & NIS2 readiness. Brief description of the work: • A documented and practical risk assessment methodology aligned with ISO 27001, ISO 27005, NIS2, and the TU/e risk management framework. • Standard templates, scoring criteria, risk categories, impact scales, and guidance for assessing inherent and residual risk. • Clear criteria for risk acceptance, escalation, treatment, and management approval. • Risk assessments for agreed critical services, systems, projects, suppliers, research environments, and organisational units. • Clear documentation of assets, threats, vulnerabilities, existing controls, risk scenarios, likelihood, impa...