GRC & Compliance
Information Security Advisor
AmsterdamConsultancyHybrideSenioroverige
Over de opdracht
You advise on information security strategy and implementation across the organisation. You identify vulnerabilities in processes, systems, and governance—then drive solutions that stick.
You balance security hardening with business enablement. Your role bridges technical teams, management, and the board, translating risk into action.
Jouw werkzaamheden
- Design and implement information security policies aligned with ISO 27001, NIS2, and sector-specific regulations
- Conduct security risk assessments on critical systems, infrastructure, and processes
- Monitor compliance with legal and regulatory obligations; prepare audit reports
- Advise leadership on security investments and remediation priorities
- Build security awareness and training programmes for staff at all levels
- Manage vendor security assessments and third-party risk
- Lead incident response coordination and post-incident reviews
- Stay current on emerging threats and adjust defences accordingly
Tech Stack & Tools
Platforms & Tooling
ServiceNow GRCArcherOneTrustvulnerability scanning tools
Frameworks & Standaarden
ISO 27001NIS2NIST CSFCOBITCIS Controls
Cloud & Infrastructure
AzureAWShybrid environments
Methodieken
Risk managementthreat modellingsecurity auditsGAP analysis
Certificeringen (pré)
CISMCISSPCRISCCISA
Must-haves
- 5+ years information security or IT risk management experience
- Deep knowledge of ISO 27001, NIS2, or equivalent compliance frameworks
- Ability to communicate security concepts to non-technical stakeholders
- Proven track record advising on security strategy and governance
- Strong analytical and problem-solving skills
Nice-to-haves
- Experience with GRC platforms (ServiceNow, Archer, OneTrust)
- Background in your organisation's industry sector
- Knowledge of threat intelligence and MITRE ATT&CK framework
Wat wij bieden
- Influence security strategy at board level
- Work across all business units—no single silo
- Continuous learning budget and certification support
- Flexible working arrangements
- Competitive compensation package
- Personal guidance from a dedicated MVPeople consultant who knows your niche
Het proces
1
Kennismaking
Telefonisch gesprek met je MVPeople consultant (binnen 24 uur)
2
Match & Brief
We bespreken de opdracht in detail en bereiden je voor
3
Klantgesprek
Introductie bij de opdrachtgever
4
Start
Contractering en onboarding
Details
Type
Consultancy
Locatie
Amsterdam
Werkmodel
Hybride
Niveau
Senior
Sector
overige
Geplaatst
23 maart 2026
Contact
MVPeople Group
jobs@mvpeoplegroup.com