Information Security Manager – Governance, Risk & Compliance (GRC)

• Amsterdam
• Full Time
• Remote
• Salary 90.000 - 140.000
• Ref:196

Fulltime – Amsterdam

About the organization

We are a European market leader in real estate and have grown into a major player in this segment within just a few years. With hundreds of professionals spread across 20+ offices in 11 countries, we combine local expertise with international scale.

Based in our Amsterdam office, you will work in a dynamic, international environment with colleagues from over 50 different countries. Our culture is fast-paced, entrepreneurial and forward-looking. Growth is at the core: not only the growth of the company, but also of our people. That’s why we invest heavily in training and development programs.

The role

As Information Security Manager – Governance, Risk & Compliance (GRC), you will be responsible for building and maintaining a mature information security program. You will manage risk, compliance and policies, ensuring that our security framework aligns with international standards such as ISO 27001 and NIST.

You will work closely with IT, HR, Finance, Legal (including GDPR) and senior management. Reporting directly to the CISO, you will be the anchor point for all GRC-related matters. With your experience in information security and compliance, you will contribute to further professionalization of the organization and strengthen the company’s overall cyber security posture.

What you will do

• Develop and manage risk management and compliance processes
• Maintain and update security policies and procedures
• Lead the security awareness and training program
• Implement and operate third-party risk management (vendor due diligence, contract management, audits)
• Drive security compliance activities (assessments, audits, reporting)
• Ensure alignment with ISO 27001, NIST and other security standards
• Monitor and report on GRC-related KPIs
• Advise the business on information security, data privacy and cyber security

Your profile

• Minimum of 5 years’ experience in information security or as a GRC manager
• Proven experience with governance, risk management and compliance in international organizations
• Knowledge of frameworks such as ISO 27001, NIST and GDPR
• Strong project management and stakeholder management skills
• Fluent in English, both verbal and written
• Self-starter, structured and analytical mindset
• Security certifications such as CISSP or CISM are highly valued
• Microsoft and/or Azure experience is a plus
• You must reside in the Netherlands to be eligible for this position

What we offer

• A key role within a fast-growing international real estate organization
• Full-time position based in Amsterdam (hybrid work model: 3 days in the office)
• Extensive opportunities for professional and personal growth
• An innovative and international work environment with focus on information security and cyber security
• Attractive benefits package including:
• Salary in line with seniority and experience
• Pension scheme
• State-of-the-art technology package
• Learning & development budget