As an Information Security Officer, you are the key sparring partner in the field of information security. You liaise with both technical teams and management, helping an organization identify, analyze, and manage risks. You translate complex security issues into practical advice and ensure that security becomes a natural part of processes, projects, and decision-making.
Additionally, you contribute to the further development of the Information Security Management System (ISMS) and support teams in taking the right security measures. You will work for a government organization where information security plays an important role in daily service delivery to citizens. Due to its size, complex IT landscape, and large amount of sensitive information, security is an essential part of the organization.
You will join a professional and dynamic environment where information security, compliance, and risk management are high on the agenda. Here, you will have the opportunity to make a real impact and contribute to further strengthening the organization's security maturity.
What you do
- Facilitate and guide risk analyses and threat modeling sessions.
- Advise on information security risks and control measures.
- Further develop the Information Security Management System (ISMS).
- Translate technical security issues into understandable business risks.
- Support management in security-related decision-making.
- Monitor compliance with relevant security standards and guidelines.
- Advise on procurement processes and the establishment of security requirements.
- Contribute to security awareness, cyber exercises, and crisis simulations.
- Collaborate with stakeholders at various levels within the organization.
What they ask
- HBO or WO education, preferably in Information Security, IT, or Risk Management.
- Minimum 5 years of experience in information security or IT security.
- Minimum 3 years of experience with security risk management and advising on complex security issues.
- In-depth knowledge of ISO27001 and/or BIO2.
- In possession of a CISM or CISSP certification.
- Experience with conducting and guiding risk analyses and security assessments.
Preferences.
- Experience within a government or public environment.
- Knowledge of relevant laws and regulations.
- Experience with vendor management and contract administration.
- Experience with establishing and testing security requirements within tender or procurement processes.
- Experience with security awareness, cyber exercises, and crisis simulations.
Profile
- Strong communication skills.
- Persuasiveness and stakeholder management.
- Proactive and entrepreneurial attitude.
- Able to translate technical risks into understandable business risks for management and executive board.
- Team player who easily connects with various stakeholders.
How to apply
View the full assignment text and application details once your tailored application is ready.
Order a tailored application to view the full assignment and application details.
More context, less searching.
You get enough context to judge whether this job is relevant. The full brief, client details and next steps stay available inside the app.