Technical Information Security Officer

ph3Are you passionate about information security and technology? Do you enjoy working with both technical and non-technical teams to make security practical, effective and part of the way people work? Then this role could be a great opportunity for you. /h3 h3Description /h3 pAs Technical Information Security Officer, you act as a trusted advisor and bridge the gap between security governance and technical implementation. You work closely with IT, product development, sales and project teams to translate security requirements into clear workable measures. /p pYou play a leading role in maintaining and improving our Information Security Management System, strengthening audit readiness. supporting compliance with relevant regulations, and helping ensure that security is embedded into our products, services and internal processes, especially as we increasingly embed AI into our solutions. /p pThe role combines policy, risk management and technical security expertise. You perform risk analyses and supplier assessments, manage the audit and security awareness program and lead improvement activities. You contribute to topics such as security architecture, network security, vulnerability management, secure software development, AI-related security risks considering regulations such as the Cyber Resilience Act and the EU AI Act. /p pYou bring broad technical understanding and are comfortable discussing security architecture, networks, infrastructure, applications and cloud environments with specialists. You are able to ask the right questions, review technical designs from a security and risk perspective, and explain why security measures matter. /p pYou are proactive, analytical and pragmatic. You take ownership, work independently and enjoy turning requirements into practical improvements that help teams work securely and efficiently. /p pYou will be part of the Security Team and will have plenty of opportunity to share your ideas, improve our security approach and make a visible impact across Prime Vision. /p h3The job /h3 ul liDevelop, implement and maintain information security policies, standards and guidelines to protect company and customer information. /li liMaintain and improve the Information Security Management System and support continuous improvement of security processes. /li liManage and participate in internal and external audits, including certifications and assurance frameworks such as ISO 27001, ISAE 3402 and IRAP. /li liCollaborate with sales, project and technical teams on security requirements for proposals, customer projects and product development. /li liConduct supplier assessments, application risk analyses and security reviews for new tooling and services. /li liMonitor relevant security and privacy regulations and translate requirements into practical policies, action plans and controls. /li liWork with development teams to support secure development practices, vulnerability management and responsible use of AI technologies. /li liPerform risk assessments, maintain the risk register and follow up on risk treatment plans. /li liSupport and coordinate security incident response activities. /li liIdentify opportunities to optimize, automate and evidence security controls. /li liLead security awareness initiatives to strengthen security culture across Prime Vision. /li /ul h3What we offer /h3 pWe offer a full-time position in an informal and professional working environment with a lot of room for personal development and many extras: /p ul liAn open and inclusive workspace with colleagues from more than 20 different nationalities. /li liA globally oriented company with an equally global client base. /li liA full range of digital tools will be at your disposal, such as a laptop and a smartphone of choice. /li liA competitive salary. /li liThe possibility to work flexible hours. /li liA profit-sharing scheme for all employees. /li liThe option to purchase additional vacation days on top of the 25 standard holiday allowance. /li liExtra perks: a wide range of snacks and excellent coffee in our cozy Grand Café, options for chair massage, hairdresser, and training sessions by a personal trainer in our in-house gym. /li /ul h3Your profile /h3 pYou are an experienced information security professional who is comfortable operating at the intersection of governance, compliance and technical security. You can lead discussions with auditors, management and technical specialists, and you know how to translate complex requirements into clear, risk-based and practical security measures. /p pYou bring /p ul liA bachelor’s or master’s degree in computer science, information technology, cybersecurity, business administration or a related field. /li li5 – 7 years of relevant experience in an information security role with both technical and governance aspects. /li liDemonstrable experience maintaining and improving an Information Security Management System and managing internal and external audits. /li liStrong working knowledge of frameworks, standards and regulations such as ISO 27001, ISAE 3402, GDPR and other relevant security or assurance requirements. /li liSolid understanding of security architecture, network security, identity and access management, vulnerability management and secure software development practices. /li liExperience reviewing technical designs, network setups, infrastructure security measures or application architectures from a security and risk perspective. /li liExperience performing risk assessments, defining mitigating controls and following up on risk treatment plans with business and technical stakeholders. /li liThe ability to challenge constructively, ask the right technical questions and explain security decisions clearly to different audiences. /li liStrong analytical skills, a critical mindset and the ability to stay pragmatic, solution-oriented and focused on continuous improvement. /li liFluency in Dutch and English. /li /ul pNice to have /p ul liCertifications such as CISM, CISSP, CRISC, ISO 27001 Lead Implementer or ISO 27001 Lead Auditor. /li liExperience with security architecture reviews, network segmentation, cloud security, zero trust principles or secure-by-design product development. /li liExperience with security requirements in customer projects, software products, AI-related initiatives or regulated environments. /li liKnowledge of regulations such as the Cyber Resilience Act, NIS2 or the EU AI Act. /li /ul pThe application process will consist of 2 interviews and a Big Five personality test. We look forward to hearing from you. /p /p #J-18808-Ljbffr