Information Security Officer

Job Description

• The ISO is a high-level information security role, responsible to guide their entity through all matters concerning information security, by:
• providing advice on information security related topics
• helping the business with managing their information security risks
• verifying and challenging the effectiveness of the information security controls, processes, and action plans

Tasks performed by an ISO:

• Support risk management, by providing risk assessments, advise on risk treatment, challenges on actions plans and follow up on due dates
• Provide expert information security advice and guidance towards the organization regarding projects, initiatives and questions
• Rollout of information security initiatives towards the organisation
• Ensure that information security controls and processes are implemented and managed consistently throughout the entity
• Report quarterly towards senior management on risks, status of the information security action plan activities, information security initiatives, phishing results and incidents.

Involvement in various information security processes: Vendor assessments, Incidents, DLP cases, …

What are we looking for

• You have at least 3 years’ experience in an information security advisory role (ISO, risk management, …)
• You have a strong IT background that enables you to produce thorough risk assessments and deliver high-quality information security recommendations.
• We are NOT looking for technical hand-on profiles (like SOC analysts, security engineers) or project leaders.
• Having a CISSP, CISM or similar certification is a bonus
• You have strong communication skills in Dutch and English.
• You are able to explain technical information security concepts to different audiences (technical teams, business stakeholders, management, ...)
• You are able to work proactively and take initiatives