Sander Bierens Email & Phone Number

Luxembourg City, Luxembourg, Lu

Within ERG Group (a leading diversified natural resources group), I’m providing leadership to the information security function, teams and specialist (+50 FTE in total) in different regions over the world. In this role I'm setting direction of the Information, Cyber, Operational Technology (OT) security strategy, keeping and maintain oversight of the sustainable improvements in this area. Furthermore, the operational security activities are in scope in, including but not limited to: penetration testing, vulnerability management, security assessment, Security Operations Center and Threat Intel unit. A summary of the (ongoing) activities and achievements: - Define risk appetite for Information Security - Develop and execute Information Security roadmap and required projects;- implementation of top tier security solutions (e.g. EDR, DLP, SIEM, NDR)- Steer on network security and access control improvement programs; - Continues penetration tests, application security reviews and network scans; - Red Teaming - Setup and maintain cyber security dashboards for different stakeholders- Established membership with ISF including the transfer of knowledge - Setup of Red and Blue teams, SOC, Group penetration test service and group threat intel - Setup Policy house based on (ISF) standards of good practice - Group security awareness programs - Stakeholder management with group leadership and ensuring effective governance (IT&IS C’tee, Group Risk C’tee) - Daily management of teams (coaching, setting targets/objectives)

Amsterdam, Noord Holland, Nl

As Head of Information Security Management and Operational Risk Management, I was responsible for defining the banks Information Security and Operational Risk Management roadmap which is based on industry best practices (IT/Information Security: COBIT and ISO27001, Operational Risk: Basel II and Business Continuity (ISO22301).- Responsible for follow-up of the market developments and regulatory updates; and if necessary inform Management Board and relevant Committees about the changes/updates and their possible effects on bank strategy and business plan(s);- Develop, maintain and promote the Bank’s strategic Operational Risk Management (ORM) and Information Security Management (ISM) program;- Drive the implementation of the Bank’s ISM and ORM framework; - Identify ORM and ISM goals, objectives and metrics consistent with corporate strategic plan;- Develop reports for operational risk & control and Information Security management for relevant committees;- Oversee incident response as well as the investigation of security breaches.- Implementation of projects related to Identity and Access Management, Data Leakage Prevention, Vulnerability Management, GDPR- Defining and implementation of Business Continuity Strategy of the Bank

The Hague, South Holland, Nl

Responsible for Information Security and Business Continuity Management within NIBC.In this role I was responsible for the Information Security Policy framework and setting up the strategical roadmap for Information Security and Business Continuity Management.- Responsible for Information Security (incl. physical security) and Business Continuity Management at NIBC;- Established a sound governance in the NIBC Lines of Defenses framework;- Defined and executed NIBC strategic roadmap for Security and BCM;- Provided Security awareness on all levels within the organization;- Implemented information security improvements (i.e. identity and access management, security monitoring, vulnerability management and information asset classification).

Nieuwegein, Utrecht, Nl

Overall responsible for the business unit Information Security (25fte) within Ordina Infrastructure Solutions b.v.- Integral responsible for the business unit Information Security and Information Risk Management;- Responsible for the hiring, firing, training and coaching of 28 Information Security and Risk Management professionals;- Developed and implemented a business strategy for the unit to have an unique selling proposition, resulted in an integrated approach for Information Risk Management, Information Security and IT auditing;- Experience with account management in the field of expertise Information Security, IT Risk Management and IT audit for the Public and Finance domain.

Amsterdam Zuidoost, Nl

Responsible for Information Risk Management and the IRM function (20fte) in Central and Eastern Europe.- Functional responsible (hiring and firing) for the IRM function (25 FTE) in the CEE WHS Branches;- Functional responsible for the Crisis Management (9 FTE) function in CEE;- Established a clear and sound IRM governance structure within CEE;- Senior executive of a number of projects for the remediation of IT security risks and improvement in IT Control areas;- Improved the IT security baseline and closed significant number of IT audit findings;- Implemented MIS on Information Risk (IT Risk and Control);- Started and improved of sharing IRM knowledge within ING CEE.

Amsterdam Zuidoost, Nl

Amstelveen, Nl

Amsterdam, Nl

Senior IT auditor

1506 Ma Zaandam, Nl

Chartered Accountant

High Impact Programme

Certified It Auditing

Accountancy

Education record