Information Security Business Advisor (BISO)

Information Security Business Advisor (BISO)

Netherlands, Amersfoort Royal HaskoningDHV

Job Description

Royal HaskoningDHV is looking for an Information Security Business Advisor (BISO) for a hybrid position in Amersfoort, Netherlands . The role connects the central Information Security team with the business lines and focuses on helping managers and teams make risk-aware decisions while applying information security in a practical and risk-based way.

The BISO will advise Business Lines on information security risks, priorities, and appropriate controls, translate central security policies and standards into practical guidelines, and become involved early in projects, supplier selections, and change initiatives. The role also includes supporting risk assessments, prioritizing security improvements and investments, building relationships with managers and specialists, and increasing security awareness across the organization.

Candidates should have a completed bachelor’s or master’s degree in information security, IT, business administration, governance, risk management, or a similar field. More than 4 years of experience in a BISO, Information Security Advisor, Cyber Risk Advisor, or similar business-oriented security role is required, along with strong knowledge of security governance, risk management, vendor security, and stakeholder management. Strong communication skills in Dutch and English are required, while certifications such as CISSP, CISM, CRISC, or ISO 27001 are a plus.

Requirements

• Completed bachelor's or master's degree in information security, IT, business administration, governance, risk management, or a similar field
• More than 4 years of experience as a BISO, Information Security Advisor, Cyber Risk Advisor, or in a similar business-oriented security role
• Excellent knowledge of security governance
• Excellent knowledge of risk management
• Excellent knowledge of vendor security
• Excellent knowledge of stakeholder management
• Strong communication skills in Dutch
• Strong communication skills in English
• Certifications such as CISSP, CISM, CRISC, ISO 27001, or similar are a plus
• Curious and collaborative approach
• Ability to make complex topics accessible to a broad audience
• Ability to provide constructive advice
• Ability to work with diverse stakeholders and interests