> Markdown version of [/jobs/ext/1534449-cyber-attack-surface-management-lead](https://www.wearedevelopers.com/jobs/ext/1534449-cyber-attack-surface-management-lead). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Cyber Attack Surface Management Lead - **Company:** Enexis - **Location:** Weert, Netherlands (Remote available) - **Experience:** Expert - **Salary:** €5,704.0 - **Contract:** Permanent contract - **Skills:** Cyber Security, Software Vulnerability Management, Information Technology - **Published:** July 23, 2026 - **Apply:** https://werkenbij.enexis.nl/vacatures/cyber-attack-surface-management-lead-15908-en ## About the Role * English, You combine deep IT and OT security expertise with strategic insight and natural coaching skills. You are comfortable in a complex environment with many stakeholders and know how to bring people along in a new way of working. You switch easily between technical detail and executive-level messaging: from attack path analysis to clear management reports. You keep overview, structure complex issues and make them manageable for your team, so you can work towards visible improvements together. You also bring * A completed bachelor's or master's degree in, for example, Cyber Security, Computer Science, Electrical Engineering or a related field. * Proven experience in security in both OT and IT environments, preferably in an industrial or critical infrastructure context. * In-depth knowledge of vulnerability management, OT security concepts and of setting up or leading security teams or processes. * ## Description As CASM Lead, you are the "player-coach" of a new central team that maps, monitors and helps reduce Enexis's attack surface. You define the CASM vision, set up processes and tooling, and build a data-driven capability that brings our IT and OT landscapes together. You establish a central analytics environment, ensure asset discovery and integration with the CMDB, and make sure vulnerabilities flow into a uniform triage process. You work closely with SOC teams, security architects and system owners, so that CASM is not an island but a core part of our digital resilience. Your responsibilities * Develop and continuously refine the CASM strategy, vision, processes and multi-year roadmap. * Lead a virtual, multidisciplinary team of IT and OT CASM analysts, including coaching and team development. * Set up asset discovery (cloud, network, endpoints, IT-for-OT, OT) and integration with CMDB and scanners. * Build a central data/analytics platform for scanner data, KPIs, reporting and risk models. * Translate technical vulnerabilities into concrete business risks and drive risk-based prioritisation. * Enable OT-safe discovery and scanning and embed OT-specific hardening and configuration controls. * Together with other teams, define scope and requirements for specialist testing such as penetration tests and red teaming. *, A personal budget of 10% and a 13th-month bonus of 10.7% of your gross annual salary. You can use this flexibly or have it paid out monthly or annually., A vitality budget of €700 for e.g. sports memberships. Expanding the family? During the first year of your child's life, you will be reimbursed 70% of your daily wage for 9 weeks. ## Related Videos - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [What is the real price of one successful line of code?](https://www.wearedevelopers.com/videos/1921-what-is-the-real-price-of-one-successful-line-of-code) - [Enabling intelligent logistics automation: home-grown Industrial IoT platform at Austrian Post](https://www.wearedevelopers.com/videos/2018-enabling-intelligent-logistics-automation-home-grown-industrial-iot-platform-at-austrian-post) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data) - [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large) ## Related Articles - [Best Companies in the Netherlands: Top 25 Companies in 2023 ](https://www.wearedevelopers.com/magazine/193-best-companies-in-the-netherlands-top-25-companies-in-2023) - [The Netherlands – Europe’s powerhouse for software development?](https://www.wearedevelopers.com/magazine/31-the-netherlands-europe-s-powerhouse-for-software-development) - [How to Find Tech Jobs in Amsterdam](https://www.wearedevelopers.com/magazine/279-how-to-find-tech-jobs-in-amsterdam) - [How to land a developer job in Amsterdam](https://www.wearedevelopers.com/magazine/36-how-to-land-a-developer-job-in-amsterdam) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)