IT Security Officer

Job description

Utrecht needs you!

Step onto the front line of digital defense. At the Municipality of Utrecht, we understand the increasing threats in the modern digital age like no other – data breaches, cyberattacks, phishing emails. We invest heavily in information security and are looking for you to take our information security to unprecedented heights!

This is your job

You are a key figure in translating policy into technical implementation within the central IT department. You do this in collaboration with the administrators and IT management.

This role has a significant impact on the information security of our residents, such as the risk of sensitive data being exposed to unauthorized access. Through your contribution, you truly make a difference in safeguarding the safety of our municipality.

You will be involved in complex projects with the latest technologies, such as Microsoft's cutting-edge products, Artificial Intelligence, Containerization, Deep Learning, and Data Science.

Here you also get the chance not only to advise management, but also to leave your mark on innovative projects.

Your responsibilities:

1. You participate in or coordinate information security projects
2. You translate policy into technical implementations, using municipal policy and the BIO as a framework. You ensure that risks and measures are documented, executed, and monitored.
3. Conducting (technical) risk analyses
4. Coordinating and reporting on information security assessments, reviews, and audits
5. You monitor the implementation of information security measures at external suppliers and Cloud services
6. Delivering presentations and training to raise awareness about information security is part of your responsibilities.

For this role, the following points are important:

1. Minimum higher professional education working and thinking level (required) and technical experience (IT) (is required)
2. Work experience with the municipal government (desired)
3. Preference for permanent employment
4. Extensive experience in technical Information Security. This includes the ability to prepare risk analyses and translate measures into technical solutions.
5. Working with an ISMS and storing evidence in it
6. Assessing penetration and compliance tests and guiding security audit projects such as DigiD and ENSIA
7. Additionally, knowledge of Azure and AWS is a plus.
8. Information security certification, for example CISSP/CCSP (required, information security certification)
9. A good command of both Dutch and English