Information Security Officer
About the assignment
You shape the security culture and risk management approach for an organisation navigating complex regulatory requirements. Your role bridges technical security, compliance, and business strategy.
You'll establish security policies, oversee incident response procedures, and ensure the organisation meets industry standards. You're responsible for translating technical risk into board-level insights and driving security awareness across all teams.
Your responsibilities
- Design and maintain information security policies aligned with ISO 27001, NIS2, and relevant industry standards
- Conduct regular risk assessments and vulnerability reviews across IT infrastructure and business processes
- Manage security incident response procedures and coordinate with technical teams during breaches or threats
- Report security metrics and risk status to leadership and governance bodies quarterly
- Oversee third-party security assessments and vendor risk management processes
- Develop and deliver security awareness training programmes for all staff levels
- Monitor compliance with regulatory requirements and audit findings; track remediation timelines
Tech Stack & Tools
Platforms & Tooling
Frameworks & Standards
Cloud & Infrastructure
Methodologies
Certifications (preferred)
Must-haves
- 8+ years in information security, risk management, or compliance roles
- Deep knowledge of ISO 27001, NIS2, and governance frameworks
- Experience building and maintaining security policies and procedures
- Strong communication skills for reporting to executives and boards
- Proven incident response and breach management experience
Nice-to-haves
- Experience with GRC tools like ServiceNow GRC or Archer
- Background in a regulated industry (finance, energy, healthcare)
- CISM or CISSP certification
- Exposure to threat landscape and MITRE ATT&CK framework
What we offer
- Strategic role with real influence on security direction
- Lead a growing security function with budget ownership
- Work with executive leadership and governance bodies
- Exposure to emerging threats and industry best practices
- Flexible working arrangements and professional development budget
- Personal guidance from a dedicated MVPeople consultant who knows your niche
The process
Introduction
Phone call with your MVPeople consultant (within 24 hours)
Match & Brief
We discuss the assignment in detail and prepare you
Client meeting
Introduction to the client
Start
Contracting and onboarding
Details
Type
Consultancy
Location
Zuid-Holland, Nederland
Work model
Hybrid
Level
Senior
Industry
overige
Posted
31 March 2026
Contact
MVPeople Group
jobs@mvpeoplegroup.com