The client is a fast-growing Dutch SaaS company in the real estate sector, running fully on Microsoft Azure and growing through a buy-and-build strategy. It is ISO 27001 certified, holds an ISAE 3402 Type II assurance report and uses AI in its own product. As Information Security Officer, you are the link between policy and practice and the internal go-to person for information security, working closely with external security partners (MDR/SOC and cloud management).
What you do
- Maintaining the ISO 27001 certification, managing the ISMS and coordinating the ISAE 3402 Type II audit
- Bringing acquired companies in line with the existing certifications
- AI governance: managing the AI register and assessing new AI tools (EU AI Act)
- Assessing new technologies and tools against policy; monitoring GDPR compliance
- First point of contact for incidents; access management in Entra ID
- Running security and AI awareness training
What they ask
- 4 to 5+ years of experience in a similar security role
- Proven knowledge of ISO 27001 and ISAE 3402
- Hands-on knowledge of Azure security (Entra ID, Defender for Cloud, Sentinel), using AI to analyse data
- Experience with GDPR in a B2B software environment
- Proactive, self-managing and focused on reducing risk
- Excellent communication and analytical skills
- Based in the Netherlands; Dutch-speaking is a strong preference
- CISSP, CISM or ISO 27001 Lead Implementer and knowledge of the EU AI Act are a plus
Practical
- One-year contract with the intention of a permanent contract
- Interview process: a cultural fit interview, followed by a technical interview
How to apply
View the full assignment text and application details once your tailored application is ready.
Order a tailored application to view the full assignment and application details.
More context, less searching.
You get enough context to judge whether this job is relevant. The full brief, client details and next steps stay available inside the app.