Chief Information Security Officer – CISO

High Spirits

. Own security standards for IT and OT .

Posted 11/1/2026full-timeAmsterdam • NetherlandsLeadWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in managing security standards for IT and OT, ensuring compliance with NIS2 and ISO 27001, and leading security programs in regulated industries. Proficient in risk management, incident reporting, and technical security frameworks, with strong communication skills to influence cross-functional teams.

Highest-signal resume keywords

Security Program ManagementNIS2 ComplianceISO 27001 CertificationTechnical Understanding of Terraform and KubernetesThreat Modeling and Secure Remote Access

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Security Standards DevelopmentRisk ManagementIncident Reporting ProceduresThreat ModelingAudit LoggingSegmentationSecrets ManagementNetwork SecurityRegulatory ComplianceTechnical Documentation

Soft Skills

Influencing Without AuthorityCommunicationLeadershipCollaborationNegotiation

Tools & Technologies

TerraformKubernetesSCADA SystemsAI ToolsIEC 62443 Certification

Certifications & Qualifications

ISO 27001IEC 62443 Certification

Industry Keywords

Critical InfrastructureEnergy SectorTelecomFinanceHealthcareModbusOPC-UANIS2KRITISVendor-Managed Equipment

Tech Stack

Tools & technologies

CloudKubernetesTerraform

About the role

Key responsibilities & impact

Own security standards for IT and OT
Propose risk appetite to the management board
Set security standards and requirements and verify implementation by other teams
Provide the framework for cloud, application infrastructure, and battery-site network security
Own NIS2 and national-transposition regulatory compliance end to end
Read applicable legislation, determine obligations, write policies, and file required materials
Maintain ISO 27001 certification and extend its scope to newer platforms and operations centers
Manage surveillance audits, the risk register, statement of applicability, corrective actions, internal audit program, and supplier assessments
Run the IEC 62443-2-1, 3-2, and 3-3 certification program from gap assessment through security-level targets and certification
Work closely with the Head of OT on zones, conduits, and changes to live site networks
Negotiate security requirements in battery-supplier, EMS-provider, and connectivity-partner contracts
Work on Annex L documents, DPAs, and supplier audits
Report to the CTO and have direct access to the management board
Travel to battery sites, operations centers, regulators, and auditors as needed
Participate in the incident escalation chain and support NIS2 early-warning reporting within 24 hours of a significant incident

Requirements

What you’ll need

Hands-on security leadership in a regulated industry or critical infrastructure; experience in energy, industry, telecom, finance, or healthcare counts
Must have run a security program independently
Willingness to handle documentation, including NIS2 and KRITIS records, policies, evidence, audit preparation, and incident-reporting procedures
Willingness to read local regulation across the Netherlands, Germany, Spain, and Belgium
Ability to influence teams without formal authority
Technical understanding of Terraform modules, Kubernetes RBAC, and NetworkPolicies
Understanding of Modbus or OPC-UA links across site boundaries
Practical skills in threat modeling, segmentation, secrets management, audit logging, and secure remote access
Fluency with AI tools and frontier AI models
Professional-level English
Background check required before a final offer
Must live in the EU and have the right to work there for remote work
Dutch or German is a plus
Experience with SCADA-adjacent systems, industrial protocols, or vendor-managed site equipment is a strong plus

Benefits

Comp & perks

€300M raised to support company growth
Remote work available for candidates living in the EU with the right to work there
Paid visit to Amsterdam during the hiring process
At least five hours of uninterrupted focus time per day for most technology-team employees (role-specific expectation differs)
Minimal meetings
Professional exposure to critical energy infrastructure and energy-transition projects