Lead Cyber Attack Surface Management

Job Description

As CASM Lead, you are the "player‑coach" of a new central team that maps, monitors and helps reduce Enexis's attack surface. You define the CASM vision, set up processes and tooling, and build a data‑driven capability that brings our IT and OT landscapes together. You establish a central analytics environment, ensure asset discovery and integration with the CMDB, and make sure vulnerabilities flow into a uniform triage process. You work closely with SOC teams, security architects and system owners, so that CASM is not an island but a core part of our digital resilience.

Your responsibilities

• Develop and continuously refine the CASM strategy, vision, processes and multi‑year roadmap.
• Lead a virtual, multidisciplinary team of IT and OT CASM analysts, including coaching and team development.
• Set up asset discovery (cloud, network, endpoints, IT‑for‑OT, OT) and integration with CMDB and scanners.
• Build a central data/analytics platform for scanner data, KPIs, reporting and risk models.
• Translate technical vulnerabilities into concrete business risks and drive risk‑based prioritisation.
• Enable OT‑safe discovery and scanning and embed OT‑specific hardening and configuration controls.
• Together with other teams, define scope and requirements for specialist testing such as penetration tests and red teaming.

Job requirements

You combine deep IT and OT security expertise with strategic insight and natural coaching skills. You are comfortable in a complex environment with many stakeholders and know how to bring people along in a new way of working. You switch easily between technical detail and executive‑level messaging: from attack path analysis to clear management reports. You keep overview, structure complex issues and make them manageable for your team, so you can work towards visible improvements together.

You also bring

• A completed bachelor's or master's degree in, for example, Cyber Security, Computer Science, Electrical Engineering or a related field.
• Proven experience in security in both OT and IT environments, preferably in an industrial or critical infrastructure context.
• In‑depth knowledge of vulnerability management, OT security concepts and of setting up or leading security teams or processes.

Team & culture

Your colleagues in the Digital Resilience Center. You work closely with SOC Leads, security architects and specialists from the IT and OT SOC. Together you build an integrated, risk‑driven view of our digital resilience. The atmosphere is professional but no‑nonsense: plenty of responsibility, short lines and room to experiment with new ideas. Your main location is Weert (around two days per week); you also work hybrid and regularly visit Zwolle or Den Bosch for meetings with stakeholders.

What do you get from us?

At Enexis, you work at the forefront of one of the biggest challenges of our time: the energy transition. We make sure you're well taken care of. That starts with a comprehensive welcome package and onboarding programme to get to know your colleagues. And with strong employment conditions:

• Salary between € 5,704 and € 8,149 gross per month (based on a 40‑hour working week).
• Including secondary benefits, your total package can grow to € 10,488 gross per month. On top of your base salary, you receive 28.7% in flexible benefits (8% holiday allowance, a 13th month of 10.7% and a personal budget of 10%). You can choose to have this paid out whenever you like, or use it to buy extra days off.
• 24.5 days of holiday per year with a full‑time contract. Need more time to recharge? With your personal budget and 13th month you can buy up to 35.5 extra days off per year.
• Opportunities to work hybrid, including a home office set‑up arranged by us and a net home‑working allowance of € 2.45 per day.
• A 70% contribution to your ABP Choice Pension: Enexis pays two‑thirds of the premium, you contribute one‑third.
• A vitality budget of € 700 gross per year, which you can use for your sports subscription, your hobby or to make your home more sustainable. You can also save this up to € 2,100 for study costs or to pay off your student loan.
• Plenty of room to grow through our internal development platform and/or external courses and trainings. Whether you want to move up, switch careers or further develop your skills, we encourage you to get the best out of yourself.
• A laptop or tablet and phone that you can also use outside working hours.
• A mobility card for first‑class public transport travel and a travel allowance.

Work as Cyber Attack Surface Management Lead on the energy network of tomorrow

You will receive a response within two weeks. Do you have questions about the role? Please contact Marvin Kerdel, Corporate Recruiter IT, via [email protected].

Good to know

• After you apply, you will receive an email with more information about the process. Usually this consists of two interviews: a first (online) interview with the manager and recruiter, and a second interview with your future colleagues on site.
• Screening is part of the application process. This may include an assessment, reference checks and a Certificate of Conduct (VOG). You will receive more information about this during the procedure.