Head of IT Security

Are you ready to take the lead in shaping the IT security posture of a fast-growing, international organization? As our Head of IT Security, you will play a pivotal role in driving our cybersecurity maturity and ensuring that our organization remains secure in a rapidly evolving landscape.

Step into the role of Head of IT Security

In this role, you will oversee and further develop the day-to-day IT security operations across Normec. You ensure that our systems, data, and processes remain protected, while continuously improving our cybersecurity posture. You work closely with the CISO, internal stakeholders, and external partners to ensure readiness, resilience, and compliance.

A day in this role might include monitoring security incidents, the effectiveness of our security tools, meeting with strategic suppliers, deep-dive into a complex security issue or preparing recommendations for one of our Group IT Steering Committees. This is a hands-on leadership role where operational tasks meets strategic oversight.

Next to this, you will:

• Maintain and improve incident response protocols.
• Manage relationships with security vendors and service providers to ensure high-quality delivery.
• Conduct regular performance reviews and address areas for improvement.
• Oversee deployment, configuration, and maintenance of security tools and technologies.
• Support the CISO in shaping IT security strategies, policies, and procedures.
• Ensure compliance with regulations, standards, and internal policies.
• Stay informed on the latest threats and trends and translate them into improvements.
• Participate in relevant Group IT Steering Committees.

Our offer

• A yearly salary up to 120K gross, based on a 40 hours work week, including holiday pay.
• 25 days of annual leave.
• Hybrid working possibilities.
• A collective pension scheme with 50% of the premium paid by us.
• Plenty of opportunities for growth and development.
• A dynamic environment where your expertise genuinely shapes our security posture.

Your profile

• Bachelor’s or Master’s degree in Computer Science, IT, Cybersecurity, or equivalent.
• At least 5 years of experience in IT security.
• Strong knowledge of IT security tools, technologies, and best practices.
• Deep understanding of security frameworks (e.g., NIST CSF), network security, firewalls, IDS/IPS, SIEM tools.
• Proven experience managing vendors and security operations.
• Ability to work in a fast-paced, dynamic environment and manage multiple priorities.
• At least fluent in English and living in The Netherlands.

Your new workplace

At Normec Holding (our headquarters), you will join an open, informal, and collaborative environment where initiative is encouraged and expertise truly matters. We are a fast-growing organisation with a dynamic pace—ideal for someone who enjoys variety, ownership, and continuous evolution in their work. In this role, you will work at least 2 to 3 days per week from our office in Utrecht, combining focus time at home with meaningful collaboration on site.

About Normec

Normec is a trusted leader in the Testing, Inspection, Certification, and Compliance (TICC) industry. Our expertise spans critical areas such as water, air, and soil quality, fire and food safety, ensuring the highest standards of quality and security across diverse industries. Established in 2016, Normec is an ambitious, independent, and rapidly growing organisation.

We offer our team members the opportunity to contribute to our mission while developing their careers in a dynamic, fast-paced environment, creating impactful solutions for clients and a sustainable tomorrow. The essence of Normec’s culture, characterized as informal, open, dynamic, and ambitiously entrepreneurial, is rooted in our foundational GROWTH principles. These are embedded in The Normec Fit programm, which ensures that not only our company grows, but also everyone who is part of it.

Interested? Let’s talk!

For questions or more information, please contact Maureen Ensink via We look forward to receiving your application.

Unsolicited contact from recruitment agencies is not appreciated and will not receive a response.