Productowner Cybersecurity

Do you want to make education and research resilient to cyber threats? Do you enjoy developing innovative cyber security services and would you like to help others use cyber solutions? If you would also like to work with our institutions in projects to concretely increase technical cyber resilience, we are looking for you!

Where you will work

SURF is the IT cooperative for Dutch educational and research institutions. Together with them, we work on digital services and complex innovation challenges to enhance the quality of education and research.

A key strategic goal of SURF and its members is to make Dutch education and research more resilient in terms of cybersecurity. A risk-based approach is central to this. We have an eye for both technology, awareness and organisation.

The team you will join

The Security Awareness and Organisation Team is a team of nine people, each with their own thematic responsibility. Your responsibility is thus the theme of Privacy. This team is part of the Trust & Security department and together we are responsible for service delivery, innovation and cooperation in the field of cybersecurity, privacy and IAM. On Mondays, we are always in the office and start the week together with a check-in.

We regularly have a lunch & learn. There, we informally discuss a topic with each other over a sandwich. For example, it's about community behaviour or hacking IOT devices and the other day we had a broad update on innovation. Our communities of security and privacy professionals are central to us. We think it is important to connect with each other.

What you will do

As product owner, you are responsible for SURF domains and involved in the underlying DNS infrastructure. You ensure that this continues to run smoothly, monitor customer satisfaction and develop the service. You are also responsible for the business case of SURF domains and take care of planning and reporting. You work closely with the technical product managers of this service. You will also develop our security service portfolio, such as in the area of DNS Firewalls or by establishing links with other (security) services.

You are also responsible for the Technical Resilience theme. You help institutions increase their technical resilience with projects and community activities. For instance, you organise resilience tests, develop a technical framework that gives institutions insight into their practical resilience. You also run projects on applying basic measures such as network segmentation, encryption, multifactor authentication and logging.

Other tasks you will handle:

• You will be responsible for our cybersecurity service SURFdomains. Together with the technical product managers of this service, you ensure that it functions properly and develop it where necessary.
• Based on priorities from the target group, the most common cyber threats and solutions, you lead projects to help institutions understand their technical resilience.
• You liaise closely with educational and research institutions on your services and projects, usage and further development. You take care of business cases, reporting, planning and communication.
• You propagate the importance of a joint approach for the entire education and research sector, share project results within the target group and be an ambassador for cybersecurity within education and research.
• Together with the team, you are responsible for and further develop the security service portfolio and perform backup tasks as product manager.

Your skills and experience

• You have hbo/wo working and thinking level and at least 3 years of relevant work experience;
• You have demonstrable affinity with modern cybersecurity techniques;
• You have experience with communication about technically complex subjects; experience with (communication about) cybersecurity is an important plus;
• You have experience with project management and/or product management;
• You have a good command of the Dutch language and you can work both independently and in a team;
• You can understand the needs of different target groups (such as students, teachers, IT staff).

SURF takes pleasure in doing its recruitment itself; acquisition is therefore not appreciated.