HM
Information Security Officer (CGRC) (Leiden, ZH, NL, 2332 AA)
Heerema Marine Contractors
Leiden, South Holland, NL
Leiden, South Holland, NL (On-site)1 open job
Offshore contractor that transports, installs, and removes structures worldwide using the largest crane vessels, spanning offshore wind, heavy lift, subsea, and decommissioning operations.
Heerema Marine Contractors operates in an environment where the attack surface floats. The company transports, installs, and removes offshore structures worldwide, running the world's largest crane vessels across three business lines: offshore wind installation, offshore transport and installation, and decommissioning. The technical estate underneath that work is not a standard corporate IT footprint - marine automation, dynamic positioning systems, subsea equipment, ROV operations, and heavy-lift crane controls all sit on the operational side of the house, connected to shore-based engineering, project management, and international offices.
That topology is the security problem. Vessels, subsea tooling, and onshore facilities exchange data across global operations, and the systems involved - dynamic positioning, crane and deck machinery, ROV control - are safety-critical before they are anything else. Loss of availability or integrity in those domains is not a business-continuity inconvenience; it is a hazard to crews and infrastructure offshore. The same holds for the offshore wind and decommissioning lines, where logistics and installation sequences depend on precise, connected marine technology.
Onshore, headquarters sits in Leiden, Netherlands, with international offices linking colleagues to projects and clients worldwide. The stated working culture is built on safety first - the Dare to Care programme is placed ahead of the company's other values - with social responsibility, quality, and continuous improvement alongside it. Open dialogue is formalized through SpeakUp. Teams are described as global and diverse, closely coupled between onshore and offshore roles, with structured training and a path from technical and operational positions into broader professional responsibility.
For security practitioners, the concrete domains to work across are marine automation, dynamic positioning, subsea and ROV systems, heavy-lift crane vessels, offshore logistics, engineering, project management, and R&D. The work is practical and varied, and the blast radius of getting it wrong is measured in physical terms.