Season 6 of Cyber Security District podcast is here and we sit down with Martijn Nykerk, Global CISO at Randstad and a cybersecurity leader with nearly two decades of experience securing complex, global organisations.
From industrial systems to enterprise-scale security leadership, Martijn has seen how the field has evolved, from niche technical discipline to board-level priority. Yet despite all the technological progress, his core belief remains unchanged: cybersecurity is still fundamentally a human problem.
Meet Martijn Nykerk
Martijn’s path into cybersecurity started in engineering, working on industrial environments where safety and security were directly linked to real-world impact. Those early experiences shaped his understanding of risk. Security wasn’t abstract, it was tangible, immediate and often irreversible.
Over time, he moved into leadership roles, ultimately becoming Global CISO at Randstad, where he is responsible for securing a highly distributed, global organisation operating at massive scale. What stands out in his journey is not just technical depth, but his ability to connect technology with business priorities and human behaviour.
When Cybersecurity Becomes Priority #1
In many organisations, cybersecurity competes with dozens of other priorities, until an incident happens. Martijn has seen how quickly that dynamic can change.
“Cybersecurity moved from priority number 43 to priority number one.”
In those moments, the organisation shifts instantly. Decision-making accelerates, communication intensifies, and the margin for error disappears.
What matters most is not just preparation, but leadership.
“You can make a difference… if you’re willing to take decisions at all levels.”
The ability to act decisively under pressure, often without complete information is what separates effective security leaders from the rest.
The Reality Behind the CISO Role
From the outside, the CISO role is often perceived as highly technical, focused on tooling, threats, and architecture. In reality, it is far more nuanced.
Martijn describes it as a constant balancing act between different layers of the organisation, shifting from deep technical challenges to process-level decisions, and then up again to business strategy.
“You need to zoom in and out constantly… it might be an engineering problem at one level, and a business problem at another.”
This ability to move between contexts is critical. Security decisions rarely exist in isolation, they impact operations, risk, compliance and ultimately the business itself.
Why Cybersecurity Is Still a People Problem
Despite the rapid evolution of technology, Martijn believes the biggest challenges in cybersecurity remain human. Tools can detect threats, systems can automate responses but people determine how effectively organisations prepare, respond and adapt.
That’s why, when building teams, he looks beyond technical expertise.
“I’d be looking for someone who is also a social animal… not afraid to connect.”
Cybersecurity leaders must influence across the organisation, build relationships, and create alignment long before incidents occur.
“It’s important to build relationships… so you can find each other when something happens.”
In practice, strong relationships often matter as much as strong technology.
AI Is Changing the Scale of Cyber Threats
Like many leaders in the field, Martijn sees AI as a defining force in cybersecurity, but not just because of its capabilities. The real shift lies in scale and accessibility.
“The biggest thing is the scale… the barrier to entry is much lower.”
Attacks that once required significant expertise can now be executed far more easily. Phishing campaigns, for example, have become more convincing and harder to detect.
“80% is enough to get someone to click.”
At the same time, technologies like deepfakes are blurring the line between real and fake.
“It wasn’t hard to make a distinction… if this is true or not true.”
This creates a new challenge for organisations: defending not just against more attacks, but against more convincing ones.
A Fragmented Industry and the Need for Trust
Another challenge Martijn highlights is the fragmentation of the cybersecurity landscape. Organisations are often overwhelmed by the number of tools and vendors available, without clear alignment on what is truly necessary.
“Do you need 40 solutions, or are three enough?”
At the same time, collaboration across the industry remains limited.
“We should trust each other… there’s 80% overlap.”
For Martijn, improving trust and knowledge-sharing between organisations is critical, not only for efficiency, but for collective resilience against increasingly sophisticated threats.
The Future of Cybersecurity Leadership
What emerges from this conversation is a clear shift in what it means to lead in cybersecurity.
It is no longer just about tools or frameworks, but about navigating complexity. Leaders must make decisions under uncertainty, move seamlessly between technical detail and business impact and build trust across their organisations before a crisis unfolds.
At the same time, they must adapt to a landscape where threats scale faster than ever before. Martijn’s perspective is a reminder that while technology continues to evolve, the fundamentals of cybersecurity remain deeply human.
Watch the full episode on YouTube
