CareerPlan

Information Security Officer

Rivierenwijk, UtrechtFull-time2026-10-27 → 2026-10-28
Hybrid

Core

Information Security Officer responsible for translating compliance requirements into operational processes, managing ISMS, and serving as the primary point of contact for security incidents and audits.

Role type

Senior IC Information Security Officer (Governance & Operations)

Builds

Secure cloud-based SaaS solutions for the Dutch real estate market

Domain

Real Estate / SaaS / Cloud Security

Deliverable

production ML models

Required skills

ISO 27001, ISAE 3402, Microsoft Azure security (Entra ID, Defender for Cloud, Sentinel), GDPR/AVG compliance, risk assessment, vendor security management, AI security risk management

Preferred skills

CISSP, CISM, ISAE 3402 audit experience, EU AI Act knowledge, SaaS/cloud-native environment experience, real estate sector experience

Technologies

Azure Entra ID, Defender for Cloud, Sentinel, Nerium MDR, Intercept Cloud Control

Responsibilities

Manage and maintain ISMS and policy documents (ISO 27001), coordinate annual ISAE 3402 Type II audits, ensure GDPR/AVG compliance including processor agreements, execute risk assessments, manage security incidents and escalations, oversee monthly control cycles (patching, access management), manage vendor security assessments and onboarding of acquired companies, organize security and AI awareness training, advise management on security strategy and investments

Seniority

Senior, hands-on IC