Integrated Security Officer (BCM Focus)
Introduction
At TenneT, we work on the electricity grid of tomorrow. As an Integrated Security Officer within Digital & Technology Transformation (DTT), you play a crucial role in ensuring a resilient and future-proof organization. From your expertise, you directly contribute to safeguarding critical operations and maintaining business continuity – today and in the future.
About TenneT, unit, department and team
TenneT is a leading European Transmission System Operator (TSO) and plays a key role in the energy transition. With more than 23,500 kilometers of high-voltage connections and thousands of employees, we ensure a reliable and secure electricity supply in the Netherlands and large parts of Germany.
You will be working within the Digital & Technology Transformation (DTT) unit. This unit is responsible for driving digital innovation, IT transformation, and ensuring secure and reliable digital operations across TenneT.
Within DTT, you will operate in a team focused on security, risk, and resilience, supporting business continuity and information security initiatives across
multiple business units.
You will be part of a multidisciplinary environment where collaboration with IT, security, and business stakeholders is essential to ensure operational continuity and resilience.
The function
How do you keep the Netherlands running? As an Integrated Security Officer (BCM focus), you are responsible for strengthening Business Continuity Management (BCM) within DTT. You ensure that critical operations can be maintained or quickly restored in case of disruptions.
Your responsibilities include:
• Acting as the central DTT point of contact for BCM-related topics
• Coordinating and supporting Business Impact Analyses (BIA) and risk assessments
• Supporting the definition of Recovery Time Objectives (RTOs) and Recovery Point Objectives (RPOs)
• Designing, documenting, testing, and maintaining Business Continuity Plans (BCP) and Disaster Recovery Plans (DRP)
• Evaluating test results and driving continuous improvement of continuity plans
• Ensuring lessons learned are incorporated into BCM processes
• Developing and delivering training and awareness programs on cybersecurity and BCM
• Assessing and monitoring business continuity capabilities of critical vendors
• Integrating third-party risks into the BCM framework
• Collaborating with DTT and business units to ensure continuity readiness
• Preparing regular reports on BCM, risk, and security topics for senior management
You will work closely with stakeholders across IT, security, and business teams, acting as a key coordinator for resilience and continuity initiatives.
What do you bring?
• Bachelor’s degree in IT, Information Security, Business Administration, or a related field
• 5+ years of experience in Business Continuity Management, Information Security, and Risk Management
• Experience with ISO standards such as ISO 22301 and ISO 27001 (strongly preferred)
• Strong stakeholder management and coordination skills
• Ability to quickly grasp complex topics and focus on core issues
• Proactive and structured working style
• Strong communication skills in English (Dutch is a plus)
Competencies:
• Strong collaboration skills across multidisciplinary teams
• Ability to act as a central point of contact and coordinator
• Analytical mindset with a focus on risk and resilience
• Service-oriented and stakeholder-focused approach
• Continuous improvement mindset
Important
• Role combines security, risk management, and resilience planning
• Strong focus on Business Continuity Management within an enterprise environment
• Stakeholder management and coordination are critical for success
• Experience with ISO frameworks is highly valued
• Vendor and third-party risk management is an integral part of the role
• You need to be the eyes and ears of the manager for certain projects.
• The soft skills (communicational and politcaly senitivity) are just as important as the technical skills.
Practical information
• A Certificate of Conduct (VOG) and a AIVD-B screening must be obtained before the candidate can start!
• Location: 3 days a week in Arhnem (monday mandatory) the rest hybride. During the onboarding you will need to be more present at the office.
• ZZP: this role is suitable for freelancers*
• Extension option: yes
• Interviews: maximum of 2 rounds
• If there are enough suitable candidates this role can be closed on a earlier date or time.
*PLEASE NOTE: We no longer work with a ZZP Indirect construction within TenneT. This will be a fee-only construction where € 1,45 of the margin is retained from the supplier. After 1 year worked, the supplier will definitely leave out of the chain. So take this into account.
Additional information:
• Suppliers of candidates must be aware of the applicable laws and regulations in the field of employment conditions and the (TenneT) collective labor agreement. This commitment falls within scale 9 of the TenneT collective labor agreement;
• We would like to receive the personal motivation and CV in English/Dutch.
Screening:
• Pre-employment screening: If the candidate is allowed to start at the client, a pre-employment screening will take place. We will then send you the necessary documents. Your candidate may only start after completing the pre-employment screening. The VOG application is part of the screening from Magnit, the VOG must be received before the candidate can start; The AIVD screening also needs to be completed.
• The candidate has proof of identity (a passport or identity card), which is valid at intake and on the start date of the candidate's contract and can be submitted for verification.
Availability:
• It is important that the candidate is available for the entire requested period in the application;
• When offering a candidate, we assume that you agree with the terms and conditions of this specific client. If you are not familiar with these conditions, you can request them from the responsible recruiter.
IMPORTANT! Fill in all candidate details correctly. Always enter the date of birth correctly and enter at ?place of residence? the candidate's place of residence. This is data that the customer wants to receive with the offer. In the event of incomplete/incorrect offers, there is a risk that the candidate cannot be offered and will therefore be rejected.