Senior Security Manager Energy Trade

Eneco is committed to accelerating the energy transition through its One Planet Plan
, with the ambition to be climate neutral by 2035. Digital and technology are key enablers of this mission, and cyber security plays a crucial role in protecting Eneco’s platforms, markets, and customers.

At Eneco, you contribute to meaningful impact while working in an organisation that values responsibility, collaboration, and technical excellence.

Energy trading is one of the most business-critical domains within Eneco, relying on complex systems, integrations, and external dependencies. As Senior Security Manager Energy Trade, you ensure that this environment is resilient against cyber threats and compliant with regulatory expectations.

You work closely with subject matter experts from the Tech organisation and with senior stakeholders within the Trade department. You translate complex security risks into clear, actionable insights and ensure transparent reporting towards leadership, including the Management Board.

In this role, you help shape how cyber security is embedded in Eneco’s trading operations, balancing risk management, regulatory compliance, and business continuity in a fast-moving market environment.

• Owning the identification, assessment, and mitigation of cyber security risks within the Energy Trade domain

• Acting as the primary security contact for the Trade organisation

• Translating project and platform risks into concrete security measures and tracking their implementation

• Validating and overseeing third-party risk assessments related to trading platforms and vendors

• Ensuring alignment with internal security standards and external regulatory requirements

• Providing clear, transparent reporting on the security posture of the trading environment to senior management and the Management Board

You are a senior security professional who is comfortable operating in high-pressure, business-critical environments. You enjoy working closely with the business, understand how digital risk impacts commercial outcomes, and know how to balance security requirements with operational reality.

You build trust easily with senior stakeholders, take ownership naturally, and are able to translate complex technical and regulatory topics into clear messages for decision-makers. You bring:

• A bachelor’s degree or equivalent level of thinking in Information Systems, Cybersecurity, IT Audit, or a related field

• Extensive experience (typically 10+ years) in IT security, IT risk management, or comparable security roles

• A strong track record in senior stakeholder management, security consultancy, and executive-level reporting

• Proven experience translating regulations and frameworks into actionable security controls and monitoring practices

• Broad knowledge of security domains and standards (e.g. ISO 270xx, NIS2, CIS, Zero Trust, SSDLC)

• Experience working with external regulators or supervisors (e.g. RDI, BSI, BNetzA, DNB, AFM, or similar)

• Excellent analytical, organisational, and communication skills

• Relevant professional certifications (e.g. CISSP, CISM, CISA, CRISC) are considered a strong plus

You will join the IT Security, Risk & Compliance team within Eneco’s Tech organisation. This first-line security team supports Eneco’s value chains and verticals in identifying and mitigating cyber security risks and ensuring compliance with internal and external regulations.

You will work closely with colleagues across Tech and the Trade organisation in a hybrid setup, combining collaboration at the Rotterdam HQ with flexible remote working.

• You operate at the heart of Eneco’s energy trading activities, with direct exposure to senior leadership

• You work on cyber security in a fast-moving, regulated environment where decisions truly matter

• You combine strategic responsibility with tangible impact in a mature, professional security organisation

• Impact
  Safeguard the digital infrastructure that enables Eneco’s energy trading activities in a highly regulated and business-critical environment.

• Complexity & Ownership
  Operate at the intersection of cyber security, energy markets, and senior leadership, with end-to-end responsibility for risk visibility and mitigation.

• Influence & Trust
  Act as the primary cyber security counterpart for the Trade organisation and provide direct insight to the Management Board.