Project Manager Secure Modern Workplace - Digital Safety

ppOver de functie /p pIn het kort: Je gaat als projectmanager de Secure Modern Workplace binnen het Digital Safety Program definiëren, ontwerpen en uitrollen, met faculteiten samenwerken, MDM en Microsoft endpoint management implementeren en een veilig, toekomstbestendig werkplekmodel realiseren. /p pDescription for this hiring position /p pThe Eindhoven University of Technology (TU/e) is within scope of the NIS2 directive and has strategically committed to achieving ISO27001 compliance maturity in the coming years. The TU/e has identified four strategic focus areas within its Digital Safety Program. /p pThe Digital Safety Program aims to significantly strengthen the university’s cyber resilience, governance, identity data security, endpoint security and overall control framework, while maintaining the open and collaborative nature of an academic institution. /p pTo support this transformation, TU/e is looking for a highly experienced project manager to execute the Secure Modern Workplace initiative within the scope of the Digital Safety Program. /p h3Secure Modern Workplace /h3 pThe Secure Modern Workplace project will define, design and implement a future-ready workplace model for TU/e. The project must balance strong central security standards with the specific needs of faculties, researchers, local IT teams and specialized academic environments. /p pA key objective is to co-create new workplace types with the faculties, including the standard secure workplace, research workplace, Linux workplace, macOS workplace and BYOD workplace. /p pThe project also includes the roll-out of Mobile Device Management and the use of Microsoft capabilities such as Intune, Autopilot, Company Portal, Entra ID, Conditional Access, device compliance and Microsoft Defender for Endpoint. /p h3Role Profile – Workplace Engineer Subject Matter Expert /h3 pThe Project Manager is responsible for delivering the Secure Modern Workplace initiative within the Digital Safety Program. The objective is to establish a controlled, automated and service-oriented workplace model that reduces unmanaged risk, improves user experience and lowers operational support effort. /p pThe Project Manager will coordinate co-creation with faculties and local IT, translate functional and technical requirements into service building blocks, and steer the design, pilot and rollout of the agreed workplace concepts and MDM capabilities. /p h3Key Responsibilities Include /h3 ul liDevelop and maintain the project plan, roadmap, milestones, dependencies, risks and budget. /li liOrganize and facilitate faculty co-creation workshops and stakeholder alignment sessions. /li liCoordinate the definition of workplace types: standard secure, research, Linux, macOS and BYOD. /li liTranslate workplace requirements into service building blocks, operating model choices and support boundaries. /li liCoordinate the MDM rollout and Microsoft endpoint management design, including Intune and related Microsoft products. /li liEnsure alignment with security baselines, identity, conditional access, application packaging and support processes. /li liSet up governance, escalation, exception handling, acceptance criteria and operational handover. /li liCoach, involve and train an internal project manager to support knowledge transfer and future ownership. /li /ul pThe ideal candidate has extensive experience leading complex modern workplace, endpoint management, cybersecurity and service design projects in decentralized organizations. The role requires strong stakeholder management, the ability to balance security with academic freedom, and the credibility to work with faculty leadership, researchers, local IT, LIS, architects, security specialists and senior management. /p h3The department and organization /h3 pTU/e consists of various departments and faculties where education and research are conducted, supported by several central services. The candidate will work as project manager within the Digital Safety Program, primarily with LIS workplace management, end-user services, architecture, security operations and service management teams. /p pA substantial part of the assignment is to work directly with faculty stakeholders, researchers and local IT teams to create buy-in, validate requirements, define workable service options and ensure a smooth transition into the new Secure Modern Workplace support model. /p pYou report to the Program Manager Digital Safety. /p h3Description of the work and Key Deliverables /h3 ul liApproved Project Approach: A clear project plan covering scope, phases, milestones, dependencies, risks, resources, decision points and budget control. /li liFaculty Co-Creation and Adoption Approach: A structured approach for involving faculty leadership, researchers, local IT and workplace specialists through workshops, taskforces and decision preparation. /li liWorkplace Type Definition: A validated definition of the main workplace types: standard secure workplace, research workplace, Linux workplace, macOS workplace, and BYOD workplace, including eligibility and support boundaries. /li liSecure Standard Workplace Design: A design for the standard secure workplace, including device management, security baseline, user experience, application access, and operational support model. /li liResearch Workplace Model: A model for research environments that preserves required flexibility while defining security controls, support limitations, recovery-to-baseline principles and exception handling. /li liLinux and macOS Workplace Model: A practical design for managing Linux and macOS workplaces, including management tooling, ownership, patching, security baseline, support model and operational feasibility. /li liBYOD Workplace and MDM Model: A design for BYOD access, mobile device management, device compliance, enrolment, remote wipe, application access and privacy-sensitive operating principles. /li liMicrosoft Endpoint Management Roadmap: A detailed roadmap for using Intune, Autopilot, Company Portal, Entra ID, Conditional Access, compliance policies and Microsoft Defender for Endpoint in the target workplace model. /li liMDM Roll-out and Migration Plan: A phased rollout plan for MDM adoption, including pilots, migration waves, communication, readiness criteria, user impact and operational dependencies. /li liApplication Packaging and Light Rationalisation Approach: An approach for application packaging, scripting, Company Portal publication and light rationalisation of the application landscape. /li liSecurity Baseline and Compliance Model: A minimum management and security baseline covering device compliance, local admin approach, patching, endpoint protection, vulnerability visibility, logging and monitoring. /li liIAM and Conditional Access Alignment: Alignment with IAM, identity lifecycle, device identity, user identity, RBAC/ABAC principles, conditional access and privileged access requirements. /li liException and Risk Acceptance Process: A formal process for justified exceptions, including ownership, compensating measures, approval, expiry dates and review cycles. /li liService Building Blocks and Operating Model: Translation of the workplace concepts into service building blocks, service catalogue descriptions, responsibilities, support levels, handover and BAU operating model. /li liPilot Implementation and Evaluation: A completed pilot with selected faculties or user groups, including lessons learned, refined processes, confirmed service definitions, and recommendations for wider rollout. /li liKnowledge Transfer and Internal Project Manager Coaching: Active involvement, coaching and training of an internal project manager, including shadowing, documentation, decision logic and practical handover of project management routines. /li /ul h3Eisen /h3 ul liDienstverband: Detachering /li liDe aangeboden kandidaat voldoet minimaal aan de kwalificaties en competenties zoals opgegeven in het functieprofiel (1.3). /li liFluent in English mandatory; Dutch required language for speaking. /li liWork location is Eindhoven (minimal 3 days). /li liKandidaten zijn geen student of medewerker bij de TU/e. /li /ul h3Wensen /h3 ul liGeen wensen /li /ul h3Overige informatie /h3 pOptie tot verlenging: Ja, tot maximale looptijd van 2 jaar, daarna eventueel nog langer met wederzijds goedvinden /p pGespreksdatum: 08/10/2026 tussen 9-13 uur /p pDienstverband: Detachering /p h3Over de opdrachtgever /h3 pDe Technische Universiteit Eindhoven is een vooraanstaande technische universiteit gevestigd in Eindhoven. De universiteit richt zich op onderzoek en onderwijs op het gebied van technologie, engineering en innovatie. Met ongeveer 11.000 studenten en 3.500 medewerkers is de universiteit een belangrijke speler in de wereld van technologie en wetenschap. De Technische Universiteit Eindhoven biedt diverse bachelor- en masteropleidingen aan op gebieden zoals werktuigbouwkunde, elektrotechniek, informatica en biomedische technologie. Daarnaast is de universiteit actief betrokken bij onderzoek en innovatieprojecten in samenwerking met bedrijven en andere kennisinstellingen. De focus ligt op het ontwikkelen van nieuwe technologieën en oplossingen die bijdragen aan maatschappelijke uitdagingen en economische groei. /p pDe sluitingsdatum van deze opdracht is de harde deadline van onze opdrachtgever. /p /p #J-18808-Ljbffr