Does this position allow remote work?

Occasional remote work is allowed for this position.

What type of contract is offered for this position?

Type of contract for this position: {contract_type}

Job summary

Permanent contract

Netherlands

Occasional remote

Salary: Not specified

Experience: > 1 year

Skills & expertise

Cybersecurity knowledge

Communication skills

Azure

Actively

21 hours ago

Interested in this job?

Questions and answers about the job

As an Information Security Officer, you will be a subject matter contact for security controls within DataSnipper
You will help maintain internal security policies, operate internal security risk activities, and support SOC 2 and other audit activities
You will play an important role in protecting DataSnipper’s information systems, product, and customer data from security threats while ensuring the resilience and availability of our IT infrastructure
You will work closely with all departments, alongside the other Security team members
Contribute to defining, implementing, and maintaining information security policies
Operate risk assessment and internal security control activities, including tracking and monitoring remediation actions
Support compliance with SOC 2, ISO 27001, GDPR, and other relevant frameworks; actively contribute to the annual SOC 2 audit process, including evidence collection and day-to-day auditor communication
Support and deliver employee training and awareness initiatives to drive adoption of guidelines and policies
Provide support for client requests related to the security topics
Monitor and respond to security incidents, ensuring timely resolution and appropriate reporting collaborating with the relevant teams
First responder for the information security requests from the internal DataSnipper stakeholders, escalate where necessary
Collaborate with engineering and product teams to improve secure development processes

Solid understanding of key security domains, including identity and access management, network and cloud security, and secure development practices
Working knowledge of information security and compliance frameworks (e.g., SOC reports, ISO 27000 series, COBIT), as well as IT and cloud security audits
Practical experience with information security control and testing process
Strong communication and problem-solving skills, with the ability to collaborate effectively with stakeholders across teams and grow into broader ownership
Practical experience with vendor risk assessments and third-party due diligence
Proactive, self-directed mindset with a strong track record of delivering tangible results
2–5 years of experience in information security, with demonstrated ownership of compliance frameworks (SOC 2, ISO 27001) and associated audits
Experience with Vanta
Relevant security certifications: CISSP, CISM, CISA, CCSP, Azure security certifications etc
Familiarity with EU security regulations such as EU AI Act, Cybersecurity Act etc