Security Consultant - Governance.
Governance Consultant ISO / NIS2.
Permanent · Utrecht · Hybrid · Up to $7,500 gross per month excl. vacation pay + company car
Randstad Digital is building a new cybersecurity consultancy. No staffing model where you sit alone at a client, but engagements based on results, delivered by a team. The clients are mid-sized organizations of roughly 250 to 1,250 employees: not a mature security organization, but a reason to start now — NIS2 on the horizon, a client asking for ISO 27001, an incident that came too close.
As a Governance Consultant, you are the driving force behind the governance and compliance work. You build the ISMS, translate the standard into measures that are actually implemented, and you are one of the first consultants in a team that is still taking shape.
What you will do.
You work with clients on both the front end and the execution. Your responsibilities include:
- Setting up or professionalizing the ISMS at clients who don't yet have one in place;
- Conducting NIS2 and ISO 27001 gap analyses and risk analyses as the starting point of a project;
- Translating those outcomes into a roadmap with priorities, milestones, and owners;
- Translating standard requirements into policies, processes, and technical and organizational measures;
- Implementing controls, together with the client's IT and security teams and with fellow consultants on risk, BCM, and IAM;
- Advising on what truly needs to happen, what's wise, and what can wait — and explaining that just as well to management as to engineers;
- Helping build the practice's propositions, such as an NIS2 quick scan, an ISO 27001 readiness project, or governance around AI security;
- Sharing what you know: internal sessions, articles, client events.
What you bring.
Randstad Digital is looking for someone who knows ISO 27001 as more than just words on paper.
- Demonstrable experience with ISO 27001, including implementing and maintaining controls — not just the policy around them;
- Practical knowledge of NIS2: you know the requirements and what they mean for an organization;
- Experience in a role such as (T)ISO, Information Security Officer, GRC consultant, or compliance consultant;
- The ability to switch between C-level, IT management, and technical staff, and to deliver a difficult message without damaging the relationship;
- Enthusiasm for helping build a practice: you deliberately step into something that isn't finished yet;
- Fluent in Dutch and English.
What the organization offers.
- Up to $7,500 gross per month based on 40 hours, excluding vacation pay;
- Company car;
- Hybrid working: Monday is the fixed team day at the office in Utrecht, the rest of the week at the client or from home;
- Work in multidisciplinary teams that deliver a result, not separate hours;
- A position as one of the first core consultants, with influence on the approach, the propositions, and who joins next;
- The backing of Randstad behind a proposition that is just getting started.
Apply now.
Your details go straight into our system — no middlemen, no mailing lists.