Does this position allow remote work?

Occasional remote work is allowed for this position.

What type of contract is offered for this position?

Type of contract for this position: {contract_type}

Job summary

Permanent contract

Netherlands

Occasional remote

Salary: Not specified

Experience: > 5 years

Skills & expertise

Cybersecurity knowledge

IT security

Incident response

Problem-solving skills

Azure

11 hours ago

Interested in this job?

Questions and answers about the job

As the Senior Information Security Officer, you will be the subject matter expert and contact point for security controls within DataSnipper
You will manage and update internal security policies, operate the internal security risk activities and run SOC 2 and other audit activities
You protect DataSnipper’s information systems, product and customer data from security threats while ensuring resilience and availability of our IT infrastructure
Define and implement relevant information security policies
Lead risk assessment and internal security control efforts, including planning, tracking and monitoring remediation actions
Maintain compliance with SOC 2, ISO 27001, GDPR and other relevant frameworks; manage the annual SOC 2 audit end-to-end, including evidence collection and auditor liaison
Lead employee training and awareness initiatives
Be the subject matter expert for client security questions and concerns
Monitor and respond to security incidents, ensuring timely resolution and reporting
Be the expert in one or more areas of information security to identify, prevent and respond to risks and incidents
Partner with engineering and product teams to improve secure development processes

5–7 years in information security, with demonstrated ownership of compliance frameworks (SOC 2, ISO 27001) and their audits
Ability to test, evidence and validate operating effectiveness of controls
Hands-on vendor risk assessments and third-party due diligence
Leadership, communication and problem-solving; influences stakeholders at all levels
Working knowledge across IAM, network and cloud security, secure development
Working experience across InfoSec, data privacy and compliance frameworks (SOC reports, ISO 27000 series, COBIT), plus IT and cloud security audits
Proactive, self-directed, track record of tangible results
Certifications: CISSP, CISM, CISA, CCSP, Azure security
Experience with Vanta
Experience with EU security regulation (EU AI Act, Cybersecurity Act, etc.)
Security operations or product security project experience