CISO

Introduction

I am looking for an experienced freelance interim CISO for a large healthcare organization in the Amsterdam region. In this role, you will temporarily replace the permanent CISO, maintain the organization’s current level of maturity in information security, and ensure the team is firmly established before your successor returns.

Organization

A large healthcare organization where information security plays a strategic role. The organization is NEN 7510-certified and prepared for the Cybersecurity Act. You will work within the IT & Automation cluster, reporting hierarchically to the CIO and functionally to the responsible executive. You will lead a team of four (Technical) Information Security Officers—two of those positions are currently vacant.

The environment is complex and requires someone who can quickly build trust with the board, medical specialists, and internal stakeholders, while at the same time demonstrating composure and decisiveness when incidents occur.

Job Information

As an Interim CISO, you will maintain the current level of information security, implement targeted improvements, and firmly establish the team within the organization. You will be visible and approachable—both to your own team and to the broader organization.

Work includes, among other things:

• Recruiting, training, and assigning roles to the two new ISO employees
• Ensuring NEN 7510 certification and compliance with the Cybersecurity Act, including any necessary audit
• Assessing resilience in accordance with the schedule, including through participation in crisis management exercises
• Implementing targeted improvements based on the existing risk management cycle
• Develop a prioritized security roadmap for 2027 and beyond, in consultation with the CIO
• Preparing a comprehensive handover package for the permanent CISO upon his or her return

Job Requirements

• At least 10 years of relevant experience in the field of information security
• Experience managing security specialists and recruiting new team members
• Thorough knowledge of NEN 7510 / ISO 27001 and the Cybersecurity Act
• Pragmatic, socially skilled, and able to quickly build trust with management and specialists
• Calm and decisive in emergency situations
• Available for 24–32 hours per week, on-site

Pros

• Experience in the healthcare sector, preferably in a top-tier clinical or similar setting
• Knowledge of medical device security / OT
• Relevant CISO/CISM/CISSP certification

Offer

• Start: as soon as possible (to be determined)
• Duration: approximately 6 months
• 24 to 32 hours per week
• On-site in the Amsterdam area

Job Application

Would you like to apply right away? Then click the "Apply" button. Do you have any questions or would you like more information? Feel free to contact Max at max@einvigi.com or call +31(0)38 211 0211.