Information Security Officer

We're looking for an enthusiastic Information Security Officer who can do more than just keep our ISO certificates up-to-date – we want someone who will help us get even more! But in practice, the answer would be closer to the following:

For our Engineering team, it means finding a colleague to help implement stronger secure coding practices. DevSecOps being the magic word for them.

Our commercial teams want our clients' data to be as secure as Fort Knox, but with more regular audits! That's why they're looking for someone truly passionate about Cybersecurity who can also chat with clients about it from time to time.

Our colleagues around Europe need consistent training and secure ways of working so they can continue to collaborate effectively. Hence, they want someone who can even make something like "locking your computer" seem interesting.

About the job

• Develop, implement, and maintain comprehensive company-wide security policies and procedures.

• Proven experience with ISO standards, preferably ISO27001 certification.

• Conduct regular security assessments, audits and penetration testing to identify vulnerabilities and ensure compliance with security standards, and internal processes and controls. Propose and implement new controls to ensure acceptable risk levels.

• Manage security incidents and breaches, including response planning and investigations.

• Ensure robust data protection practices are in place, monitor data security compliance, and address potential risks to protect sensitive information from unauthorized access and breaches.

• Drive the adoption of a DevSecOps culture, put attention into importance of security across all phases of software development.

• Collaborate with development teams to integrate security best practices and tools into the software development lifecycle, enhance their security knowledge and practices through training, development, and usage of appropriate tools.

• Prepare and present security reports.

• Stay updated on the latest security threats and countermeasures.

What you'll bring

• 3+ years of proven experience in a security engineer/officer role with a focus on cloud software applications or internal IT infrastructure.

• Strong knowledge of security frameworks and certifications (e.g., ISO27001, SOC 2).

• Experience in developing and implementing security policies and procedures.

• Familiarity with risk management methodologies and security audit processes.

• Excellent communication skills and the ability to work collaboratively across teams and departments. Dutch is a strong asset.

• Familiarity with secure coding practices and integrating security into the SDLC.

• A strategic mindset with the ability to translate security needs into comprehensive security strategies.

• A proactive approach to security challenges, with the ability to lead and inspire a culture of security awareness.

  
  Nice to have: 

• Certifications in relevant fields (CISSP, CISM, CEH, OSCP etc.).

• Experience in a DevSecOps environment.

• Previous experience in training and skill development initiatives.

   

  Bonus: 

• Interest in sustainable software development. 

What's in it for you?

• Good salary and good pension arrangement.

• 25 holidays on full time basis.

• Personal development budget.

• An informal, dynamic, inspiring and professional working environment.Fresh lunch every day.

• A healthy workplace: daily fresh fruit at the office and an ergonomic workplace with standing desk.

• FUN quarterly meetings, team events and lots of celebrating.

• Plenty of room for personal input.

• We are easily accessible by public transport and have plenty of parking spaces.