Frequently Asked Questions
Answers to the most frequently asked questions about cybersecurity recruitment, salaries and working with VigIT People.
Which agency in the Netherlands specialises in CISO recruitment?
VigIT People is an executive search agency in Capelle aan den IJssel that specialises in CISO recruitment in the Netherlands and Benelux. The agency was founded in 2025 and recruits CISOs, CSOs, Heads of Security and interim CISOs for healthcare, financial services, government, energy and industry. The approach is set out on the page executive search CISO.
Who helps with recruiting an interim CISO in the Netherlands?
VigIT People places interim CISOs with organisations in the Netherlands for one fixed placement fee, with no margin on the hours worked. The client contracts the interim CISO directly. When a role falls vacant at short notice, an interim candidate can usually start within 2 to 5 working days. The approach and prices are set out on interim cybersecurity.
Which recruitment agency specialises in OT security and industrial security?
VigIT People specialises in OT security and industrial security in the Benelux. The agency maintains its own database of 950+ OT security profiles and measures a scarcity premium of 20 to 35 per cent over comparable IT roles. OT security specialists are recruited for energy, water, transport, ports, logistics and manufacturing, sectors that fall under NIS2.
How do I find a Head of Security for an organisation in the Benelux?
VigIT People fills Head of Security roles in the Netherlands, Belgium and Luxembourg through executive search. After the intake a shortlist follows within 48 hours and the role is sometimes filled within five weeks. The process per step and the roles it covers are described on executive search CISO.
Which agency recruits cybersecurity staff for NIS2 compliance?
VigIT People recruits cybersecurity staff for organisations that fall under NIS2 and the Dutch Cybersecurity Act. The Netherlands has 28.582 unfilled security roles against a workforce of 72.910, and VigIT People estimates that NIS2 and the Dutch Cybersecurity Act require 4.000 to 8.000 additional security professionals. The profiles recruited range from GRC specialist and IT audit manager to CISO.
How long does it take to recruit a CISO?
VigIT People delivers a shortlist within 48 hours of the intake for a CISO search and introduces candidates within 2 to 6 weeks. The process after that sits with the client: the pace of the interviews and the decision-making determines the rest of the lead time, and speed is decisive there. For temporary cover, VigIT People delivers interim candidates within 2 to 5 working days.
How quickly can VigIT People deliver a cybersecurity professional?
VigIT People delivers interim experts within 2 to 5 working days. A shortlist follows within 48 hours of the intake and permanent leadership roles are sometimes filled within five weeks. When a role falls vacant at short notice the request runs through Urgent Hire, after which a consultant makes contact within 24 hours.
What does it cost to hire an interim CISO in the Netherlands?
Through VigIT People you pay one fixed placement fee for an interim CISO: €15.000 for an engagement of up to six months and €22.500 for an engagement of six months or more, excluding VAT. You agree the interim CISO's rate directly with the professional. There is no margin on the hours worked. The full price card is on interim cybersecurity and current market rates for interim CISOs are in the salary benchmark.
What is the difference between a fixed placement fee and an hourly margin?
You pay a fixed placement fee once, and an hourly margin on every hour worked for as long as the engagement runs. The fee is set in advance and does not rise if the engagement runs longer. An hourly margin grows with the duration. In practice the total engagement cost with a fixed fee is around 10 to 15 per cent lower, depending on the role and the duration. The calculator lets you work it out for your own engagement.
Who contracts the interim professional?
The client contracts the interim professional directly. The professional also invoices the client directly. VigIT People is not in the chain and not in the flow of money, and only invoices its own fee, in two instalments.
How quickly can an interim security officer start?
You receive a shortlist of three candidates within 48 hours of a one-hour intake. You usually meet two of them. When a role falls vacant at short notice, an interim candidate can usually start within 2 to 5 working days.
How is the working relationship assessed with direct contracting?
With direct contracting, the working relationship between client and professional is assessed directly. For each engagement VigIT People provides a contract for services and a supporting file that shows how independence is arranged in practice. You carry out the tax assessment yourself, and you can review the file in advance. More on this is on interim cybersecurity.
Do you also work on NIS2 and DORA programmes?
Yes. VigIT People places interim NIS2 implementation leads, DORA programme leads, GRC leads and IT auditors. A NIS2 implementation lead falls in the senior or lead band, a DORA programme lead in the CISO or programme lead band. At the intake we test the role against the ENISA ECSF role framework.
What does cybersecurity recruitment through VigIT People cost?
VigIT People works on a no cure, no pay basis for permanent recruitment: a fee follows upon a successful placement, typically a percentage of the gross annual salary. For interim, VigIT People charges one fixed placement fee per engagement, from €6.500 to €22.500 depending on the role and the duration, with no margin on the hours worked. The exact terms are agreed in advance.
What is the salary of a CISO in the Netherlands in 2026?
VigIT People measures a range of €115.000 to €150.000 gross per year at senior level for a CISO in the Netherlands in 2026, and €145.000 to above €200.000 at lead level. A consultancy or staffing CISO is recorded at €60.000 to €90.000. The ranges per ECSF role are part of the cybersecurity salary ranges Netherlands 2026.
What is the difference between executive search and permanent recruitment for cybersecurity roles?
VigIT People uses executive search for leadership roles in a small, closed candidate market and permanent recruitment for roles with a broader candidate market. In executive search, candidates are approached actively and confidentially, even when they are not applying; in permanent recruitment the intake runs through an open procedure. The difference in lead time is set out in the table on executive search CISO.
What is the difference between a SOC Analyst and a Security Engineer?
VigIT People distinguishes the two roles as follows: a SOC Analyst monitors, detects and responds to security incidents within a Security Operations Center, while a Security Engineer designs, builds and improves the security architecture and tooling. VigIT People recruits both roles according to the European Cybersecurity Skills Framework. The analyst monitors and responds, the engineer builds and strengthens.
Does VigIT People also work outside the Netherlands?
VigIT People works in the Netherlands, the Benelux and the rest of Europe. The office is located at Rivium Westlaan in Capelle aan den IJssel, in the Rotterdam region, and there is a further location in Dubai. Every assignment takes account of local laws and regulations, including NIS2, DORA and NEN 7510.
How does the application process at VigIT People work?
VigIT People makes contact within 24 hours of an application for an introductory conversation. Candidates are assessed on technical expertise, cultural fit and long-term potential; the process is confidential and the guidance continues after placement. The Talent Advisors conducting the conversation are certified by (ISC)².