Energy

Energy companies in the Netherlands are primarily covered by the Cyberbeveiligingswet (Cbw), the Dutch implementation of NIS2, which has applied since 15 August 2026. Organisations designated as critical entities also fall under the Critical Entities Resilience Act (Wwke). In the electricity sector, the European network code on cybersecurity, Delegated Regulation (EU) 2024/1366, may also apply depending on the processes an organisation runs. For OT environments, the ISA/IEC 62443 series is the common standard.

An energy company mainly needs OT/ICS security engineers and architects who can secure SCADA environments and substations. NIS2 implementation specialists, CISOs with energy sector experience and GRC and compliance consultants are also in high demand. These profiles are scarce because they combine knowledge of process environments with security expertise. Not every organisation needs a full-time person for every task, but every task does need a clear owner.

MVPeople Group responds to every request within 4 hours and, for interim assignments, often presents a first profile within 4 hours, with introduction CVs within 24 hours. Candidates come from a network of more than 7,000 pre-screened cybersecurity professionals, including OT/ICS specialists with energy experience. That helps when a grid operator or energy company faces a short deadline, for example an audit or a designation as a critical entity.

Interim fits a temporary peak, such as a risk assessment after a Wwke designation, an audit or setting up an OT security programme based on IEC 62443. Permanent hiring fits structural work such as operations, monitoring and patch management in the process domain. Many energy companies combine both: an interim specialist lays the foundation and a permanent hire takes over afterwards. Through MVPermanent, permanent hiring typically takes 2 to 4 weeks.