As an internal Information Security Officer, you will take ownership of the security program of a fast-growing SaaS company in the real estate sector. This company is fully based on Microsoft Azure, grows through buy-and-build, and is ISO 27001 certified with an ISAE 3402 Type II statement. It also uses AI within its own product.
You will be the linchpin between policy and practice and the internal point of contact for information security, in close collaboration with external security partners (MDR/SOC and cloud management).
What you will do.
- Maintain ISO 27001 certification, manage the ISMS, and coordinate the ISAE 3402 Type II audit
- Ensure acquired companies comply with existing certifications
- AI governance: manage the AI register and assess new AI tools (EU AI Act)
- Test new technologies and tools against policy; monitor AVG/GDPR compliance
- First point of contact for incidents; access management in Entra ID
- Provide security and AI awareness training
Profile
- Minimum 4 to 5 years of experience in a similar security role
- Demonstrable knowledge of ISO 27001 and ISAE 3402
- Practical knowledge of Azure security (Entra ID, Defender for Cloud, Sentinel)
- Experience with AVG/GDPR in a B2B software environment
- Proactive, self-managing, and focused on risk reduction
- Strong communication and analytical skills
- Fluent in Dutch and English
- CISSP, CISM or ISO 27001 Lead Implementer and knowledge of the EU AI Act are a plus
How to apply
View the full assignment text and application details once your tailored application is ready.
Order a tailored application to view the full assignment and application details.
More context, less searching.
You get enough context to judge whether this job is relevant. The full brief, client details and next steps stay available inside the app.