As an Information Security Officer, you are the sparring partner in the field of information security. You liaise with both technical teams and management and help a government organization identify, analyze, and manage risks. You translate complex security issues into practical advice and ensure that security becomes a natural part of processes, projects, and decision-making.
Additionally, you contribute to the further development of the Information Security Management System (ISMS) and support teams in taking appropriate security measures. You will work on strategic security and risk management issues within a complex enterprise environment.
What you will do.
- Facilitate and guide risk analyses and threat modeling sessions.
- Advise on information security risks and control measures.
- Further develop the Information Security Management System (ISMS).
- Translate technical security issues into understandable business risks.
- Support management in security-related decision-making.
- Monitor compliance with relevant security standards and guidelines.
- Advise on procurement processes and the establishment of security requirements.
- Contribute to security awareness, cyber exercises, and crisis simulations.
- Collaborate with stakeholders at various levels within the organization.
What they ask
- HBO or WO education, preferably in Information Security, IT, or Risk Management.
- Minimum of 5 years of experience in information security or IT security.
- Minimum of 3 years of experience with security risk management and advising on complex security issues.
- In-depth knowledge of ISO27001 and/or BIO2.
- In possession of a CISM or CISSP certification.
- Experience with conducting and guiding risk analyses and security assessments.
Preferences.
- Experience within a government or public environment.
- Knowledge of relevant laws and regulations.
- Experience with vendor management and contract management.
- Experience with establishing and testing security requirements within tender or procurement processes.
- Experience with security awareness, cyber exercises, and crisis simulations.
Profile
- Strong communication skills.
- Persuasiveness and stakeholder management.
- Proactive and entrepreneurial attitude.
- Able to translate technical risks into understandable business risks for management and executive board.
- Team player who easily connects with various stakeholders.
How to apply
View the full assignment text and application details once your tailored application is ready.
Order a tailored application to view the full assignment and application details.
More context, less searching.
You get enough context to judge whether this job is relevant. The full brief, client details and next steps stay available inside the app.