07/13/2026 updated
100 % available
Security Advisor | I give leadership security they can build on, and the evidence to prove it.
Dokkum, Netherlands
Worldwide
MA Information & Communicaiton Sciences (Computer Communication)ISO 27001Information AssuranceInformation Security ManagementSherwood Applied Business Security ArchitectureSecurity ManagingSolution ArchitectureSecurity StrategiesSoftware SecuritySecurity Consultancy
Security Architect and Information Security Officer with 12+ years in cybersecurity and IT (since 2013) and 10 years in security and software engineering, including 4+ years in dedicated architecture roles. I work at the intersection of enterprise security architecture, solution architecture, and engineering practice.
Core expertise:
- Enterprise security architecture and solution architecture (SABSA, TOGAF, ArchiMate)
- Secure by Design, SSDLC, and threat modeling (9 years)
- Cloud security architecture on AWS and Azure (8 years)
- IAM and secrets management (6 years)
- Risk management: ISO 27005, ISO 31000, FAIR quantitative risk analysis (7 years)
- CI/CD and software supply chain security (9 years)
- Offensive security and penetration testing background (5 years, ethical hacker)
- Security requirements in procurement and vendor assessments (4 years)
- ISMS implementation and compliance: ISO 27001/27002, BIO/BIO2, NEN 7510, NIS2, GDPR, DORA
Technologies & tools: Git · GitLab · GitHub · AWS · Azure · Kubernetes · Docker · Helm · Terraform · ArgoCD · Jenkins · Renovate · Linux · Maven · Java · Python · Bash · Burp Suite · Nmap · Kali Linux · OAuth 2.0/OIDC · SAML · SAST · DAST · IAST · SCA · SBOM · SLSA
Certifications: CISSP · SABSA SCF Foundation · SABSA A3 Advanced Architecture Design · SABSA A1 Risk, Assurance & Governance (expected 2026) · TOGAF Foundation & Practitioner (expected 2026) · ISO/IEC 27001:2022 Lead Implementer · Certified ISO 31000 Risk Management Expert · Foundations of Cyber Risk & FAIR · Certified Process Improvement & Process Mapping Expert
Background: Former software engineer and ethical hacker (web application pentesting, pentest team lead), later management security consultant advising from mid-management to C-level. This combination means my architectures are technically grounded and workable for DevOps teams, while remaining traceable to business goals and risk for management and boards. I translate frameworks like ISO 27001, BIO, and NIS2 into workable processes, embed security requirements in the SDLC, and organize risk ownership, decision-making, and audit-ready evidence.
Sectors: Energy and critical infrastructure · Central government (Rijksoverheid) · Financial services · Healthcare · Telecom · Tech
Recent roles: Strategic Security Advisor / Security Architect at EDSN (energy sector), previously Xebia and Sogeti. Experience with ISO 27001 certification trajectories, security in tenders, risk analyses, cloud security, SSDLC and enterprise architecture governance.
Education: Communication & Information Sciences (Computer Communication), University of Groningen.
Languages: Dutch (native), English (fluent)
Experience
Professional experience10+ years
Freelancer since2026
Languages
EnglishFluentDutchNative speaker
Certificates
ISO 27001 Lead Implementer
PECB2026
Foundations of Cyber Risk Management and FAIR
FAIR2026
SABSA A3 | Advanced Architecture Design
SABSA2025
Certified Risk Management ISO 31000 Expert
Six Sigma Academy Amsterdam2025
SABSA SCF Foundation
SABSA2023
CISPP
ISC22021