NCC Group

Global cyber security and resilience provider

Managing Security Consultant - Crisis Management

Security Governance, Risk & ComplianceUpdated on Nov 13

Full-timeRijswijk, NetherlandsNo salary listedHybrid

About the Job

Requirements

Professional proficiency in written and spoken Dutch is essential.
Strong knowledge and practical application of cyber crisis management, cyber resilience, and organisational response frameworks.
Understanding of incident response, crisis management, business continuity, and recovery principles within resilience programmes.
Ability to design and validate cyber response plans, crisis management plans, and cyber playbooks.
Understanding of security protocols, authentication, authorization, and security vulnerabilities.
Basic knowledge of security frameworks such as ISO 27001, NIST, NIS2, and DORA, and compliance requirements such as GDPR and HIPAA.
Proven experience designing, facilitating, and evaluating cyber crisis exercises, including tabletop simulations and executive-level exercises.
Analytical and critical thinking abilities.
Effective written and verbal communication across internal and external audiences and organizational levels.
Collaboration and teamwork within multidisciplinary teams.
Project management skills for client projects.
Time management and ability to handle multiple projects simultaneously.
Reporting and presentation skills for external client presentations after a project.
Commercial awareness.

Responsibilities

Deliver client engagements as lead consultant and/or as part of a team.
Design, develop, and facilitate operational, tactical, and strategic cyber crisis readiness exercises.
Conduct risk assessments, cyber crisis management assessments, and resilience reviews, providing actionable recommendations and improvement roadmaps.
Manage or collaborate with IT and development teams to integrate security practices into business processes.
Create reports and presentations for clients.
Advise management on high-level security strategies.
Independently draft security policies, guidelines, and control frameworks aligned with regulatory requirements.
Lead client engagements and manage projects or workstreams, ensuring high-quality delivery and client satisfaction.
Provide guidance and oversight to junior consultants, foster collaboration across the team, and share knowledge and lessons learned to develop practice capability.

Desired Qualifications

Certifications such as CISM or CISSP are advantageous for C&I consultants.

Please note: Professional proficiency in both written and spoken Dutch is essential for this role

As a Managing Security Consultant specialising in Cyber Crisis management, you will help organisations strengthen their ability to prepare for, respond to, and recover from cyber incidents.

Using your industry experience and technical expertise, you will provide strategic guidance and practical solutions to identify, assess, and mitigate cyber security risks.

You will act as a trusted advisor to clients, leading the delivery of cyber resilience programmes, crisis management exercises, and incident response preparedness activities. You will translate complex technical issues into clear, business-focused recommendations that support effective decision-making and organisational resilience.

You will lead client engagements and manage projects or workstreams, ensuring high-quality delivery and client satisfaction. You will also provide guidance and oversight to junior consultants, foster collaboration across the team, and share knowledge and lessons learned to continuously develop capability within the practice.

Deliver client engagements as lead consultant and/or part of a team
Design, develop and facilitate operational, tactical and strategic cyber crisis readiness exercises
Conduct risk assessments, cyber crisis management assessments and resilience reviews, providing actionable recommendations and improvement roadmaps
Manage or collaborate with IT and development teams to integrate security practices into the business processes
Creating reports or presentations for clients
Advise management on high level security strategies.
Draft independently security policies, guidelines, and control frameworks in alignment with regulatory requirements

Technical Skills

Knowledge and use of various relevant tools, methods and techniques;

Strong knowledge and practical application of cyber crisis management, cyber resilience and organisational response frameworks
Understanding of incident response, crisis management, business continuity and recovery principals within resilience programmes
Ability to design and validate cyber response plans, crisis management plans and cyber playbooks
Understanding of security protocols, authentication, authorization, and security vulnerabilities;
Basic knowledge with security frameworks (e.g., ISO 27001, NIST, NIS2, DORA) and compliance requirements (e.g., GDPR, HIPAA);
Proven experience designing, facilitating and evaluating cyber crisis exercises including; crisis exercises, tabletop simulation and executive-level exercises
Understanding of incident response, crisis management, business continuity and recovery principals within resilience programmes
Ability to design and validate cyber response plans, crisis management plans and cyber playbooks
Understanding of security protocols, authentication, authorization, and security vulnerabilities;
Basic knowledge with security frameworks (e.g., ISO 27001, NIST, NIS2, DORA) and compliance requirements (e.g., GDPR, HIPAA);

Personal Skills

Analytical and critical thinking abilities;
Effective communication skills (written and verbal, both internal and external facing) across various levels of an organization;
Dutch language verbal en writing
Collaboration and teamwork within multi-disciplinary teams;
Project management skills for client projects;
Time management and the ability to handle multiple projects simultaneously;
Reporting & Presentation skills for external presentations to clients after a project;
Commercial awareness

Certifications are an advantage

Examples such as:

CISM, CISSP for C&I consultants.

Ways of Working

Focusing on Clients and Customers.

Always Learning.

Delivering Brilliantly.

About the Company

NCC Group

Global cyber security and resilience provider

NCC Group provides cyber security and resilience services to organizations and governments around the world. It helps protect digital systems by offering a range of capabilities such as security testing, risk assessment, and resilience planning, backed by a global team of experts and supported by technology-enabled tools. The company’s approach combines human expertise with technical solutions to identify vulnerabilities, assess risk, and implement concrete steps to improve security and continuity. What sets NCC Group apart is its large, worldwide team and its emphasis on practical, end-to-end cyber resilience—working with clients from assessment through to implementation and ongoing assurance. The goal is to create a more secure digital future by helping customers manage cyber risk, reduce threats, and maintain business continuity at scale.

Company size: 1,001-5,000
Company stage: IPO
Headquarters: Manchester, United Kingdom
Founded: 1999

Recently Posted Jobs

Explore more opportunities at NCC Group

See more jobs