Productmanager SURFcert

Are you an experienced product manager who wants to help institutions detect and mitigate cyber threats in a timely manner? Do you believe it’s important that institutions that fall victim to a cyberattack receive prompt and effective assistance? Then this is your chance to help make the education and research sectors more resilient as a Product Manager at SURFcert.

Where you will work

SURF is the ICT cooperative of Dutch education and research institutions. Together, we develop digital services and work on complex innovation challenges to improve the quality of education and research. We do this in close collaboration with the institutions themselves, with a focus on public values, and as openly as possible.

The team you will join

You’ll be joining the SURFcert team: the Computer Security Incident Response Team (CSIRT/CERT) for the Dutch education and research sector. For over thirty years, SURFcert has been supporting education and research institutions in preventing, detecting, and responding to cybersecurity incidents. Starting in 2027, SURFcert is also expected to assume a statutory role as the sector-specific CSIRT for higher education under the Cybersecurity Act (CBW), enabling the team to make an even greater contribution to the sector’s digital resilience.

SURFcert is at the heart of the education and research security community. The team consists of passionate security professionals with diverse areas of expertise and backgrounds. Some work full-time for SURFcert, while others combine their work with a role within SURF or at an educational institution. It is precisely this mix of knowledge, practical experience, and close collaboration with the sector that enables SURFcert to respond quickly to current threats and developments. The team fosters an open culture centered on knowledge sharing, collaboration, and continuous learning.

What you will do

As a Product Manager at SURFcert, you will ensure that SURFcert’s services continue to evolve and are optimally aligned with the needs of educational and research institutions. You’ll be responsible for further professionalizing our services, coordinating the non-technical aspects of the team, and ensuring that processes, communication, and work methods are well aligned. In doing so, you’ll work closely with the SURFcert manager, the technical experts, and the communications specialist.

You’ll operate in a dynamic environment where cybersecurity, laws and regulations, and societal developments evolve rapidly. You switch effortlessly between strategic issues, project-based work, and operational coordination. Even during major incidents or crises, you maintain an overview, ensure clear communication, and bring the right parties together.

Other key responsibilities include:

• Coordinating and further developing SURFcert’s services, including communication products such as an up-to-date threat assessment;
• Leading projects aimed at further professionalizing SURFcert, for example regarding new legislation, services, procurement, processes, and working methods;
• Contributing to coordination during major cybersecurity incidents and crises, with a focus on non-technical coordination and alignment;
• Aligning processes with internal and external stakeholders, including member institutions, the Ministry of Education, Culture, and Science, the National Cyber Security Center, and fellow CSIRTs;
• Ensuring that SURFcert complies with (new) legislation and policy frameworks.
• Contributing to annual plans, roadmaps, and budgets;
• Establishing a clear (administrative) separation between SURFcert’s statutory duties and its non-statutory duties, while also continually exploring opportunities for them to reinforce one another.

Your skills and experience

You are an experienced product manager who easily switches between strategy, operations, and collaboration. You maintain a clear overview in a dynamic environment, know how to break down complex issues into clear decisions, and draw energy from connecting people, processes, and services. Thanks to your strong communication skills, you navigate effortlessly between technical experts, management, and external stakeholders.

In addition, you have:

• A university-level education and way of thinking;
• At least 5 years of work experience as a product manager, product owner, or in a comparable role;
• Experience coordinating projects in a technical field and managing professionals;
• Strong communication skills and the ability to persuade, in both Dutch and English;
• Experience with budgeting, accountability, and compliance.
• Experience with grant applications and grant accountability is a plus;
• An affinity for or experience in cybersecurity is a significant plus, as is experience with incident and crisis management.
• A results-oriented mindset, where you maintain a broad perspective in a dynamic environment and excel at collaboration and navigating political dynamics.

Furthermore

A security screening may be part of the further hiring process.

You are willing to work outside of regular office hours during major incidents or crises.

SURFcert is successful because of the diversity of talent on our team. We encourage you to apply regardless of your background or identity

SURF takes pleasure in doing its recruitment itself; acquisition is therefore not appreciated.