As an internal Information Security Officer, you will take ownership of the security program of a fast-growing SaaS organization in the real estate sector. This organization is built entirely on Microsoft Azure and grows through acquisitions. The company is ISO 27001 certified, holds an ISAE 3402 Type II statement, and integrates AI into its products.
You will act as the link between policy and practice and be the internal point of contact for information security, in close collaboration with external security partners (MDR/SOC and cloud management).
What you do
- Maintain ISO 27001 certification, manage the ISMS, and coordinate the ISAE 3402 Type II audit
- Ensure acquired companies comply with existing certifications
- AI governance: manage the AI register and assess new AI tools (EU AI Act)
- Test new technologies and tools against policy; monitor AVG/GDPR compliance
- First point of contact for incidents; access management in Entra ID
- Provide security and AI awareness training
What they ask
- Minimum 4 to 5 years of experience in a similar security role
- Demonstrable knowledge of ISO 27001 and ISAE 3402
- Practical knowledge of Azure security (Entra ID, Defender for Cloud, Sentinel)
- Experience with AVG/GDPR in a B2B software environment
- Proactive, self-starting, and focused on risk reduction
- Strong communication and analytical skills, in Dutch and English
- CISSP, CISM or ISO 27001 Lead Implementer and knowledge of the EU AI Act are a plus
How to apply
View the full assignment text and application details once your tailored application is ready.
Order a tailored application to view the full assignment and application details.
More context, less searching.
You get enough context to judge whether this job is relevant. The full brief, client details and next steps stay available inside the app.