Executive search for CISO and security leadership in the Netherlands and Benelux
Recruiting CISOs and Heads of Security for organisations in healthcare, financial services, government, energy and industry.
VigIT People is a specialist executive search agency for cybersecurity leadership in the Netherlands and Benelux. VigIT People recruits CISOs, CSOs, Heads of Security and Security Managers for organisations in healthcare, financial services, government, energy and industry. The agency is based in Capelle aan den IJssel and was founded in 2025.
The office is located at Rivium Westlaan in Capelle aan den IJssel, in the Rotterdam region. The service area is the Netherlands and Benelux. The Talent Advisors at VigIT People are certified by (ISC)².
Which security leadership roles VigIT People fills
- CISO
- Holds final responsibility for information security and is the point of contact for the board and the regulator.
- Deputy CISO
- Right hand to the CISO, focused on delivery of the security programme.
- CSO
- Combines information security with physical security and business continuity.
- Head of Security
- Leads the security team and the day-to-day security operation.
- Security Manager
- Manages policy, budget and suppliers within a defined domain.
- OT security manager
- Secures production environments, ICS and SCADA alongside office IT.
- IT audit manager
- Tests controls and runs the audit cycle towards the board and the auditor.
Executive search, interim or permanent recruitment: what fits when
| Situation | Approach | Lead time |
|---|---|---|
| Permanent CISO or Head of Security, confidential process in a small candidate market | Executive search | Shortlist within 48 hours, placement from five weeks |
| The role falls vacant immediately, or an audit or incident is running | Interim CISO | Candidates within 2 to 5 working days |
| Security Manager or IT audit manager with a broader candidate market | Permanent recruitment | Introduction within 2 to 6 weeks, after which the client sets the pace |
Unsure which of the three applies? When a role falls vacant at short notice, you start with interim and run the permanent search in parallel. How interim works with us and what it costs is set out on interim cybersecurity.
OT security and NIS2: where VigIT People differs from generalists
OT security calls for candidates who understand both a production environment and a corporate network. That group is small and rarely appears on job boards. VigIT People therefore maintains its own database of 950+ OT security profiles in the Benelux, built from its own recruitment practice.
NIS2 brings sectors such as energy, water, transport, waste processing and industry under supervision. The law places responsibility with the board and requires demonstrable controls. A generalist agency assesses candidates on their CV. VigIT People also assesses them on the OT context, on the reporting line to the board, and on experience with the standard that applies in the sector, such as NEN 7510 in healthcare and DORA in financial services.
Process and lead time
A search runs in six steps. The lead time depends on the role and on the availability of the selection committee.
- Day 1: intake
- Within 24 hours of your request you speak to a consultant about the role, the team and the reporting line.
- Day 1 to 2: role profile
- We record responsibilities, mandate and remuneration, aligned with the European Cybersecurity Skills Framework.
- Within 48 hours: shortlist
- We approach candidates from our own network and deliver a shortlist with a rationale per candidate.
- Week 2 to 3: interviews
- You meet the candidates. We handle scheduling, feedback and confidentiality on both sides.
- Week 3 to 4: verification
- References, certifications and, where the role requires it, screening or a certificate of conduct.
- From week 5: offer and start
- Permanent leadership roles are sometimes filled within five weeks.
Frequently asked questions about CISO recruitment
Does VigIT People also recruit outside the Netherlands?
Yes. The service area is the Netherlands and Benelux, with placements across Europe. See also the frequently asked questions about cybersecurity recruitment.
What does a CISO earn in the Netherlands?
A board-level CISO starts at €115.000 and runs to above €200.000 gross per year. The full cybersecurity salary ranges Netherlands 2026 are set out per ECSF role on the benchmark page, together with the sector differences and the interim rates. See also our frequently asked questions.
How does a search stay confidential while the current CISO is still in post?
Candidates are approached under embargo and the client is named only after a signed non-disclosure agreement. More on this in the frequently asked questions.
Security leadership by sector
Every sector has its own rules, risks and roles. See the approach per sector:
Need a CISO for a limited period?
Interim is a separate service at VigIT People with its own pricing model. You pay one fixed placement fee and contract the interim CISO directly, with no margin on the hours worked. The approach, prices and terms are set out on interim cybersecurity.
Recruiting a CISO or Head of Security?
Get in touch for a confidential conversation. Within 24 hours you will speak to a consultant who knows your sector.