07/17/2026 updated
100 % available
Senior IT Auditor | Information Security Officer | GRC & Risk Professional | IT/OT Governance
Alphen aan den Rijn, Netherlands
Worldwide
Executive Master IT Auditing / RE programme, Erasmus University Rotterdam (2019-2022)IT Auditing & Compliance
Extensive experience conducting IT audits on operational processes, including IT Service Continuity Management, incident management, and compliance with standards such as BIO, ISO 27001, and IEC 62443. Development of risk-based audit programs, audit frameworks, and assessment schemes for various sectors including public sector, banking, and gambling.
GRC & Information Security Governance
Solid foundation in GRC with hands-on experience in setting up, guiding, and monitoring improvement actions within cybersecurity departments. Expertise in translating CBW/NIS2 requirements into applicable information security measures, governance agreements, and decision-making reports, as well as managing ESG data flows and supporting applications.
IT/OT Risk Management & Incident Response
Proven track record in IT/OT risk management, including conducting BIO and BIO2 scans, fit/gap analyses, risk analyses, and risk treatment plans. Operational experience setting up and further developing incident response processes, including triage, escalation lines, reporting procedures, and follow-up based on COBIT 2019 and ITIL 4.
ISO 27001/27002 Implementation
Lead implementation of ISO 27001:2022, including fit/gap analysis, guided implementation of security measures, policy documentation, and translation of risks into a workable ISMS with Statement of Applicability and preparation for internal audit and management review.
Third-Party & Supplier Risk Management
Contract- and risk-focused coordination with suppliers on security terms, assurance requirements, audit rights, and incident reporting procedures. Strengthening OT supplier management by structuring security requirements, responsibilities, assurance agreements, and audit options.
Cloud Risk & ESG Data Flows
Experience as IT Cloud Risk Coordinator conducting fit/gap analyses on ESG data flows and supporting applications, identifying and following up on gaps, risks, control owners, mitigating measures, and implementation priorities.
Policy Development & Board-Level Advisory
Development of meta-frameworks, policy documentation, and management reporting. Advisory to management and supervisors on risk management and compliance, including board-level advisory and training of legal staff.
NEN 7510 & IEC 62443
Application of NEN 7510 in information security and privacy baseline assessments for healthcare organizations. Development of OT security audit frameworks, applicability analyses, and audit methodologies based on IEC 62443.
COBIT 2019 & ITIL
Operational embedding of COBIT 2019 and ITIL 4 frameworks in incident response processes, control compliance reporting, and IT governance structures across public and private sector organizations.
Fraud Auditing
Registered Fraud Auditor (RFA) with expertise in IT fraud audit and conducting organization-wide risk analyses identifying, classifying, and assessing information security risks.
Extensive experience conducting IT audits on operational processes, including IT Service Continuity Management, incident management, and compliance with standards such as BIO, ISO 27001, and IEC 62443. Development of risk-based audit programs, audit frameworks, and assessment schemes for various sectors including public sector, banking, and gambling.
GRC & Information Security Governance
Solid foundation in GRC with hands-on experience in setting up, guiding, and monitoring improvement actions within cybersecurity departments. Expertise in translating CBW/NIS2 requirements into applicable information security measures, governance agreements, and decision-making reports, as well as managing ESG data flows and supporting applications.
IT/OT Risk Management & Incident Response
Proven track record in IT/OT risk management, including conducting BIO and BIO2 scans, fit/gap analyses, risk analyses, and risk treatment plans. Operational experience setting up and further developing incident response processes, including triage, escalation lines, reporting procedures, and follow-up based on COBIT 2019 and ITIL 4.
ISO 27001/27002 Implementation
Lead implementation of ISO 27001:2022, including fit/gap analysis, guided implementation of security measures, policy documentation, and translation of risks into a workable ISMS with Statement of Applicability and preparation for internal audit and management review.
Third-Party & Supplier Risk Management
Contract- and risk-focused coordination with suppliers on security terms, assurance requirements, audit rights, and incident reporting procedures. Strengthening OT supplier management by structuring security requirements, responsibilities, assurance agreements, and audit options.
Cloud Risk & ESG Data Flows
Experience as IT Cloud Risk Coordinator conducting fit/gap analyses on ESG data flows and supporting applications, identifying and following up on gaps, risks, control owners, mitigating measures, and implementation priorities.
Policy Development & Board-Level Advisory
Development of meta-frameworks, policy documentation, and management reporting. Advisory to management and supervisors on risk management and compliance, including board-level advisory and training of legal staff.
NEN 7510 & IEC 62443
Application of NEN 7510 in information security and privacy baseline assessments for healthcare organizations. Development of OT security audit frameworks, applicability analyses, and audit methodologies based on IEC 62443.
COBIT 2019 & ITIL
Operational embedding of COBIT 2019 and ITIL 4 frameworks in incident response processes, control compliance reporting, and IT governance structures across public and private sector organizations.
Fraud Auditing
Registered Fraud Auditor (RFA) with expertise in IT fraud audit and conducting organization-wide risk analyses identifying, classifying, and assessing information security risks.
Languages
EnglishFluentDutchNative speaker
Project history
Conducted baseline assessments, policy support, process analyses, application controls, and management advisory in regulated environments. Set up and further developed operational incident response for Telesur and SPSB Bank, with attention to procedures, responsibilities, escalation, and structural follow-up of incidents.
Developed a meta-framework for the coherence between BIO2, IEC 62443, and CSIR. Translated BIO2 fit/gap analyses and OT security issues into concrete improvement measures for municipalities and suppliers. Strengthened OT supplier management and optimized IT control compliance reporting.
Conducted an ISO 27001:2022 fit/gap analysis and guided implementation of appropriate security measures, policy documentation, and evidence. Translated risks and standard requirements into a workable ISMS including a Statement of Applicability and preparation for internal audit and management review.