Welcome to Season 5 of the Cyber Security District Podcast!
In this episode, our founder and host Laurens Jagt sits down with Dimitri van Zantvliet, Chief Information Security Officer (CISO) at Dutch Railways (NS). They explore how Dimitri leads cybersecurity for one of the Netherlands’ most vital public transport systems, while balancing innovation, safety, and national infrastructure protection.
Meet Dimitri van Zantvliet
Dimitri is one of the most respected cybersecurity leaders in the Netherlands, known for his hands-on technical background and his ability to translate complex cyber strategy into practical leadership.
Before joining NS, he held several senior security and risk positions across critical sectors, including finance and energy, gaining deep experience in protecting operational technology (OT) and IT systems that millions of people rely on every day.
At NS, Dimitri is responsible for safeguarding the railway’s digital ecosystem, from ticketing systems and onboard Wi-Fi to industrial control systems that keep the trains running safely and on time. His leadership sits at the intersection of technology, business, and national resilience.
“In public transport, cybersecurity isn’t just about data protection, it’s about safety, trust, and continuity for everyone who steps on a train.”
Building a Security Culture Inside a National Icon
NS is more than a railway, it’s an essential service. Dimitri explains how cybersecurity is becoming a strategic business enabler, not just a technical function. His focus is on building security awareness across all levels of the organization, from conductors and engineers to executive leadership.
“You can’t secure the railway by locking it down. You secure it by creating a culture where everyone understands their role in resilience.”
He discusses how aligning cybersecurity with operational processes ensures that NS remains efficient, reliable, and trusted by millions of daily commuters.
Balancing Innovation, Safety, and Compliance
With the transport industry rapidly digitalizing, introducing IoT, predictive maintenance, and cloud-based ticketing, Dimitri emphasizes the importance of security-by-design. He outlines the challenges of securing hybrid systems that blend decades-old legacy technology with modern AI-driven solutions.
“When you operate critical infrastructure, you have to innovate responsibly. Every new system must enhance, not compromise safety.”
Dimitri also highlights the evolving regulatory landscape in Europe, including NIS2 and other EU directives, and how NS is preparing to meet these requirements without slowing down modernization.
Lessons in Leadership and Collaboration
As a seasoned CISO, Dimitri offers candid advice on leading cybersecurity teams in high-pressure environments. He underscores the importance of collaboration, not only within the company but across sectors and with public-private partners.
“No organization stands alone. Collaboration between public institutions, private industry, and government is what truly strengthens national resilience.”
He also reflects on responsible innovation, encouraging cybersecurity leaders to combine technical expertise with empathy and communication to earn trust across the business.
Looking Ahead
Dimitri van Zantvliet’s leadership at Dutch Railways (NS) highlights the complex, high-stakes nature of securing national infrastructure. His approach blends operational experience, strategic foresight, and a commitment to responsible innovation. As AI, automation, and geopolitics reshape cybersecurity, his perspective offers valuable lessons for professionals working at the crossroads of technology and public service.
Learn more about NS
Watch the full episode on YouTube:
