Security Practice Lead

Would you like to be responsible for defining the security practices that embed security by design throughout Kramp’s software development and implementation processes?

We are looking for a Security Practice Lead who will establish the security practices, principles and technical direction needed across Kramp’s entire technology landscape. You will determine which security practices, standards and capabilities are most relevant for Kramp and translate these into practical ways of working for Product Teams. You will support and guide Product Teams in implementing security best practices across internally developed applications, SaaS solutions, platform services, integrations, APIs, infrastructure components and third-party system implementations.

You will collaborate closely with the Security Team and Platform Teams to ensure security is embedded from the earliest possible stage.

Kramp Group is supported by a Product model organization consisting of a broad range of teams (around 30) focusing on business and technology. The teams work independently on improving their products and implementing systems, while together they are responsible for secure and reliable end-to-end business processes.

The Security Team and Platform Teams enable the Product Teams with principles, guidance, assessments, tooling and guardrails that support secure implementation, integration, operation and development of technology solutions.

The Security Practice Lead helps ensure these capabilities are consistently adopted and effectively used throughout the organization while continuously assessing whether they are the right capabilities for Kramp and identifying where the security practice needs to evolve.

The role You will report to the Head of Technology Platforms and work closely with the Security Team, Product Teams, Product Owners, Tech Leads, Developers, Solution Architects and other stakeholders. You will act as an important bridge between these stakeholders, providing operational guidance on security topics to teams while supporting and guiding Product Teams to turn that direction into practical ways of working.

Within the enterprise-wide security framework set by the Head of Security, the Security Practice Lead is accountable for defining and evolving Kramp’s Security Engineering and Security Architecture principles and embedding it across Product Teams.

Furthermore you will work on:

• Security Engineering Vision and Principles. Define and continuously develop Kramp’s security Engineering vision by assessing current maturity, identifying gaps and defining the security practices and capabilities needed. Translate the vision into clear principles, standards and practical guidance for Product Teams.

• Security Guardrails and Tooling. Define and drive consistent adoption of security tooling and guardrails, including CI/CD controls, and ensure teams understand how to respond to security findings or blocked changes.

• Vulnerability Management. Ensure Product Teams act on findings from SonarQube, Dependabot, security scans and penetration tests. Improve coverage, ownership, and follow-up, and translate recurring findings into preventive controls. Escalate unresolved risks to the Security Team.

• Secure Ways of Working. Enable Product Teams through workshops and hands-on guidance, strengthening security ownership and helping teams efficiently prioritize and address vulnerabilities.

• Security Reporting. Define meaningful security metrics and dashboards, communicate risks and trends, and drive action through transparent reporting to Product Teams and management.

• Security Architecture & Improvement. Collaborate with architects, Platform Teams and Product Teams to embed principles such as least privilege, data minimization and resilience into solutions. Turn lessons from assessments, penetration tests and incidents into improved standards, guardrails and engineering practices.

What does success look like in 1 year?

• Clear security engineering vision and direction. A clear and practical security vision for security engineering at Kramp is defined, communicated and understood across the organization. The vision is translated into the right security practices, principles, standards and ways of working for Product Teams and architects.

• Clear understanding of the current security landscape. Kramp has a clear view of its current security maturity, key gaps, priorities and required capabilities, with a tech vision for further improvement.

• Security embedded in daily operations: Development teams routinely include security practices in their day-to-day delivery, from design and implementation to CI/CD, vulnerability follow-up and operational decision-making.

• Earlier involvement in solution design: Security considerations are actively included during design and planning phases, helping teams establish the right security capabilities from the beginning (security-by-design).

• Visible improvement through guardrails and reporting: Security tooling, guardrails and reporting are actively used to improve coverage, ownership and prioritization of security risks across teams.

Who are you?

• Bachelor’s degree in Computer Science, Software Engineering, Cyber Security, or a related field.

• 7+ years of experience in software development, system implementation, application security, cyber security or a related role, with experience in a leading, advising or practice-oriented position.

• Experience defining or shaping a security engineering vision, strategy, practice or framework across multiple teams or an organization.

• Proven experience with security-by-design, vulnerability management, security assessments and security tooling across software, platforms or enterprise systems.

• Strong understanding of software development processes, SaaS solutions, cloud platforms, infrastructure, integrations, APIs and modern application architectures.

• Excellent communication, collaboration, facilitation and stakeholder-management skills.

• Ability to influence without direct authority and drive adoption of standards, practices and organizational change across multiple teams.

Primary workplace is Utrecht, with willingness to travel to Varsseveld approximately 1-2 times per month.

What do we offer?

At Kramp, we believe meaningful rewards help people grow, perform, and thrive. Our reward package is designed to be fair, transparent, and competitive, giving you confidence and support to do your best work.

We offer an attractive salary of €6,597 – €8,063 gross per month, depending on your experience and qualifications.

• 25 vacation days and 12 ADV days (based on a fulltime contract)

• Flexible working policy in hours and location

• Travel- and working from home allowance

• Profit sharing bonus

• Budget for training and courses

• Generous pension plan

Do you want to join us? In case you feel challenged by the above role description and requirements, we are interested in meeting you! Please use the application button and send your CV and cover letter.

In case you do not fully meet all the requirements for this role, and you think you would be a good match for us, please apply and convince us. Do you have a question about this role? Please do not hesitate to contact Julia, out Talent Acquisition Specialist, julia.bodun@kramp.com

About us Thanks to our ambitions we are active throughout Europe: a leading position in the agricultural market for parts. We heavily invest in E-Business and innovations. Our aim is to make it easy for our customers to run their business. Working at Kramp means working with over 3500 international colleagues. The people at Kramp are enthusiastic, professional, and involved. We speak our customers’ language, understand their challenges, and earn their trust to exceed their expectations. Our promise “It’s that easy” is embedded in our culture and DNA.

Working at Kramp means:

… you belong here! Being part of our open business community … your work makes a difference! Have an impact on what matters … you will develop and realize ! Learn and realize your potential

More about Kramp: https://www.careeratkramp.com/nl-nl

Utrecht (NL)Varsseveld (NL)