Information Security Business Advisor (BISO)

Job Description

Royal HaskoningDHV is looking for an Information Security Business Advisor (BISO) for a hybrid position in Amersfoort, Netherlands. The role connects the central Information Security team with the business lines and focuses on helping managers and teams make risk-aware decisions while applying information security in a practical and risk-based way.

The BISO will advise Business Lines on information security risks, priorities, and appropriate controls, translate central security policies and standards into practical guidelines, and become involved early in projects, supplier selections, and change initiatives. The role also includes supporting risk assessments, prioritizing security improvements and investments, building relationships with managers and specialists, and increasing security awareness across the organization.

Candidates should have a completed bachelor’s or master’s degree in information security, IT, business administration, governance, risk management, or a similar field. More than 4 years of experience in a BISO, Information Security Advisor, Cyber Risk Advisor, or similar business-oriented security role is required, along with strong knowledge of security governance, risk management, vendor security, and stakeholder management. Strong communication skills in Dutch and English are required, while certifications such as CISSP, CISM, CRISC, or ISO 27001 are a plus.