WHO WE ARE

i-mens is an independent care organization. We are here for everyone, in every phase of life. We believe in the power of people to take control of their own lives with the necessary care. That is why we bring all care to the home so that everyone can remain as independent as possible in their own familiar environment.

ROLE

How do you ensure that care and well-being remain digitally secure, reliable, and resilient today and tomorrow?

In a context where cyber threats are increasing and digital services are crucial, well-thought-out cybersecurity makes the difference. At i-mens, we actively invest in secure systems, reliable data, and robust processes that protect our organization and services.

That is why we are looking for an Expert Cybersecurity. Someone who helps shape our information security and concretely helps realize its further development. You will contribute to a strong Information Security Management System (ISMS), support our organization on the path towards ISO 27001 certification, and help ensure that we meet the NIS2 requirements.

You will report directly to the ICT Director and work closely with the DPO. Within i-mens, you are the point of contact for information security. You will work closely with colleagues within ICT, external security partners, and process owners throughout the organization. Thanks to your expertise, pragmatic approach, and strong collaboration, we will grow step by step towards a higher level of cyber resilience.

Moreover, you will join us at an important turning point. i-mens will be making significant investments in cybersecurity over the coming years, with an ongoing NIS2 program, an approved budget, strong external partners, and ISO 27001 certification as a goal by spring 2027. You will have the opportunity to help lay the foundations for a future-proof and mature security operation.

WHAT WILL YOU DO

As Expert Cybersecurity, you will play a central role in the further development, implementation, and follow-up of cybersecurity and information security within i-mens. You will ensure that risks are managed, security requirements are guaranteed, and the organization continues to grow in maturity.

Specifically, this includes:

• managing and further developing the Information Security Management System (ISMS), including policies, processes, procedures, documentation, and review cycles, and leading the path towards ISO 27001 certification
• identifying, analyzing, and monitoring cybersecurity risks, managing the risk register, and periodically reporting to the relevant consultation bodies
• ensuring compliance with relevant standards and regulations, including ISO 27001, NIS2, and CyberFundamentals (CyFun), and preparing and guiding audits
• managing the Statement of Applicability and audit documentation and ensuring that i-mens remains audit-ready
• maintaining the Incident Response Plan, coordinating security incidents, and helping to ensure proper follow-up of reporting obligations and improvement actions
• contributing to business continuity and disaster recovery initiatives, with particular attention to their security aspects
• assessing supplier and supply chain risks and ensuring compliance with security requirements at critical partners
• managing external security partners and monitoring follow-up of, among other things, vulnerability management, patch management, monitoring, and identity & access management
• strengthening security awareness within i-mens through sensitization, training, and awareness campaigns
• supporting management and the board with clear reporting on KPIs, risks, incidents, and the progress of cybersecurity initiatives

PROFILE

We are looking for an experienced cybersecurity expert who feels at home in a developing organization. You combine strong substantive expertise with a pragmatic approach and are energized by building and embedding cybersecurity within a complex organizational context.

You recognize yourself in the following profile:

• You have a master's degree, preferably in an ICT-related or business-oriented field, or are equivalent through relevant experience.
• You have at least five years of demonstrable experience in information security, cybersecurity, or ICT risk management.
• You have thorough knowledge of information security frameworks and standards such as ISO 27001, NIS2, and CyberFundamentals (CyFun).
• You have experience with risk management, audits, compliance, and setting up or managing an ISMS.
• You understand the operation of modern IT environments, including infrastructure, cloud, identity, and security services.
• You have insight into security operations, vulnerability management, supplier management, and incident management.
• Certifications such as CISSP, CISM, ISO 27001 Lead Implementer, or ISO 27001 Lead Auditor are a strong asset.
• You are highly analytical, work in a structured way, and can translate complex issues into feasible actions and advice.
• You are able to engage stakeholders at various levels and can easily switch between operational teams, management, and the board.
• Experience in the healthcare sector or with the protection of sensitive personal data is an advantage.
• You communicate fluently in Dutch and have a good command of English.

PRACTICAL

The work regime can be either 4/5 or full-time, with at least 2 days performed at the office, with fixed days on Tuesday and Thursday.