With your energy, it can happen

As Cyber Attack Surface Management (CASM) Lead, you shape a central security capability that protects the vital infrastructure of the Netherlands. Enexis is at the heart of the energy transition. Our landscape – from IT to OT – is becoming more complex and more critical. You make sure we always know where we are vulnerable, which risks are most urgent, and who needs to act to reduce them.

• You make direct impact on the energy transition by making our IT and OT environment demonstrably more secure.
• You build and lead a multidisciplinary team of IT and OT specialists within the Digital Resilience Center.
• You can count on solid employment conditions such as a strong pension, a generous personal budget and a €700 vitality budget.

How you take on this challenge

As CASM Lead, you are the “player‑coach” of a new central team that maps, monitors and helps reduce Enexis’s attack surface. You define the CASM vision, set up processes and tooling, and build a data‑driven capability that brings our IT and OT landscapes together. You establish a central analytics environment, ensure asset discovery and integration with the CMDB, and make sure vulnerabilities flow into a uniform triage process. You work closely with SOC teams, security architects and system owners, so that CASM is not an island but a core part of our digital resilience.

Your responsibilities
• Develop and continuously refine the CASM strategy, vision, processes and multi‑year roadmap.
• Lead a virtual, multidisciplinary team of IT and OT CASM analysts, including coaching and team development.
• Set up asset discovery (cloud, network, endpoints, IT‑for‑OT, OT) and integration with CMDB and scanners.
• Build a central data/analytics platform for scanner data, KPIs, reporting and risk models.
• Translate technical vulnerabilities into concrete business risks and drive risk‑based prioritisation.
• Enable OT‑safe discovery and scanning and embed OT‑specific hardening and configuration controls.
• Together with other teams, define scope and requirements for specialist testing such as penetration tests and red teaming.

How you approach it

You combine deep IT and OT security expertise with strategic insight and natural coaching skills. You are comfortable in a complex environment with many stakeholders and know how to bring people along in a new way of working. You switch easily between technical detail and executive‑level messaging: from attack path analysis to clear management reports. You keep overview, structure complex issues and make them manageable for your team, so you can work towards visible improvements together.

You also bring
• A completed bachelor’s or master’s degree in, for example, Cyber Security, Computer Science, Electrical Engineering or a related field.
• Proven experience in security in both OT and IT environments, preferably in an industrial or critical infrastructure context.
• In‑depth knowledge of vulnerability management, OT security concepts and of setting up or leading security teams or processes.

You’ll tackle this with…

Your colleagues in the Digital Resilience Center. You work closely with SOC Leads, security architects and specialists from the IT and OT SOC. Together you build an integrated, risk‑driven view of our digital resilience. The atmosphere is professional but no‑nonsense: plenty of responsibility, short lines and room to experiment with new ideas. Your main location is Weert (around two days per week); you also work hybrid and regularly visit Zwolle or Den Bosch for meetings with stakeholders.

And we invest energy in you too

At Enexis, you work at the forefront of one of the biggest challenges of our time: the energy transition. We make sure you’re well taken care of. That starts with a comprehensive welcome package and onboarding programme to get to know your colleagues. And with strong employment conditions:

• Salary between € 5,704 and € 8,149 gross per month (based on a 40‑hour working week).

• Including secondary benefits, your total package can grow to € 10,488 gross per month. On top of your base salary, you receive 28.7% in flexible benefits (8% holiday allowance, a 13th month of 10.7% and a personal budget of 10%). You can choose to have this paid out whenever you like, or use it to buy extra days off.

• 24.5 days of holiday per year with a full‑time contract. Need more time to recharge? With your personal budget and 13th month you can buy up to 35.5 extra days off per year.

• Opportunities to work hybrid, including a home office set‑up arranged by us and a net home‑working allowance of € 2.45 per day. 

• A 70% contribution to your ABP Choice Pension: Enexis pays two‑thirds of the premium, you contribute one‑third.

• A vitality budget of € 700 gross per year, which you can use for your sports subscription, your hobby or to make your home more sustainable. You can also save this up to € 2,100 for study costs or to pay off your student loan.

• Plenty of room to grow through our internal development platform and/or external courses and trainings. Whether you want to move up, switch careers or further develop your skills, we encourage you to get the best out of yourself.

• A laptop or tablet and phone that you can also use outside working hours.

• A mobility card for first‑class public transport travel and a travel allowance.

Work as Cyber Attack Surface Management Lead on the energy network of tomorrow
Apply before august 17th via the button at the bottom of this page. You will receive a response to your application in the week of the 17th of august. Do you have questions about the role? Please contact Marvin Kerdel, Corporate Recruiter IT, via marvin.kerdel@enexis.nl.

Good to know

• After you apply, you will receive an email with more information about the process. Usually this consists of two interviews: a first (online) interview with the manager and recruiter, and a second interview with your future colleagues on site.

• Screening is part of the application process. This may include an assessment, reference checks and a Certificate of Conduct (VOG). You will receive more information about this during the procedure.