Information Security Officer - Team Suppliers & Customers | Den Haag

ppAs Information Security Officer (Third-Party Risk Management) you are responsible for managing and strengthening PostNL's security posture across suppliers and customer-facing partnerships. You combine cybersecurity expertise with stakeholder management skills, ensuring that third-party risks are identified, assessed and mitigated in a structured and pragmatic way. /ph3Daarom kies je als Information Security Officer - Team Suppliers Customers voor PostNL /h3pbStrategic impact: /b Third-party risk is high on the board agenda. Your work directly contributes to resilience and compliance. bComplex stakeholder landscape: /b You operate at the intersection of IT, business, legal and suppliers. bMaturity growth: /b You contribute to further professionalizing TRPM within a large, regulated organization. bVisibility: /b You interact with senior management and external strategic partners. bDevelopment: /b Opportunity to deepen expertise in regulatory frameworks (NIS2, DORA-like principles, supply chain security). /ph3Dit is jouw rol /h3pAs an Information Security Officer (ISO) focused on Third-Party Risk Management (TPRM), you will be part of our Cyber Security Office (CSO) within the Suppliers Customers domain. This domain is responsible for managing cyber risks related to suppliers, customers, and strategic partners. In this role, you help ensure that our external partnerships meet security requirements while supporting business continuity and operational goals. You understand that security should enable the business. You will perform third-party security risk assessments, including due diligence, onboarding, and periodic reassessments. Also you evaluate supplier compliance against ISO 27001, NIST Cyber Security Framework (CSF), and our internal security policies. You define, coordinate, and monitor mitigation plans together with business owners and suppliers. Also you support audits and evidence-gathering activities related to supplier security and compliance. You balance risk mitigation, regulatory compliance, and operational feasibility. By building strong relationships with internal and external stakeholders, you help create a secure and resilient supplier ecosystem that supports our business ambitions. You contribute to the further development and improvement of our Third-Party Risk Management framework, processes, and tooling. The Senior Information Security Officer position is typically positioned within salary scale 11. However, for candidates who can demonstrate relevant team-lead experience and capabilities, the role may be expanded to include team lead responsibilities and be evaluated at salary scale 12. /ph3Dit bezorgen we jou /h3ulliThis position is on scale 11 (between € 4.588,- and € 6.498,- a month), depending on experience. /liliFull-time working week of 37 hours. /lili8% holiday pay and 25 holiday days (full-time). /liliFlexible working hours to support work/life balance. /liliHybrid working model from home and from our head office next to Den Haag – Hollands Spoor station. /liliNS Business Card for business travel and commuting. /liliCollective health insurance and pension via the PostNL pension fund. /liliStrong internal training and development opportunities. /li /ulh3Dit breng je mee /h3ulliBachelor or Master degree in IT, Cybersecurity, Risk Management or Business Administration. /lili3–6+ years of relevant experience in Information Security or Third-Party Risk Management. /liliExperience with supplier risk assessments and vendor security governance. /liliStrong knowledge of ISO27001, NIST CSF, CIS Controls and audit processes. /liliUnderstanding of NIS2, GDPR and supply chain risk requirements. /liliStrong stakeholder management and negotiation skills. /liliAbility to operate independently at medior/senior level. /liliRelevant certifications (CISSP, CISM, CRISC, CISA) are considered a plus. /li /ulh3Nog wat laatste post ... /h3pWe do a background check during the application. We hereby ask you for a Certificate of Good Conduct (VOG). We will also check your references and may conduct a tailor‑made investigation. We are looking for new colleagues who want to work with us to build the PostNL of the future. We therefore return mail from recruitment agencies. As part of the recruitment process, candidates undergo an assessment designed to evaluate their competencies and skills relevant to the position. /p /p #J-18808-Ljbffr