Information Security Officer – Utrecht Region (Hybrid) – €90K-€95K

Ready to own the security programme of a fast-growing SaaS scale-up as its in-house Security Officer?

My client is a fast-growing Dutch SaaS company in the real estate sector, running fully on Microsoft Azure and growing through a buy-and-build strategy in the Netherlands and the DACH region. It is ISO 27001 certified, holds an ISAE 3402 Type II assurance report and uses AI in its own product. As Information Security Officer, you are the link between policy and practice and the internal go-to person for information security, working closely with the external security partners (MDR/SOC and cloud management).

Your responsibilities:

·       Maintaining the ISO 27001 certification, managing the ISMS and coordinating the ISAE 3402 Type II audit

·       Bringing acquired companies in line with the existing certifications

·       AI governance: managing the AI register and assessing new AI tools (EU AI Act)

·       Assessing new technologies and tools against policy; monitoring GDPR compliance

·       First point of contact for incidents; access management in Entra ID

·       Running security and AI awareness training

Your profile:

·       4 to 5+ years of experience in a similar security role

·       Proven knowledge of ISO 27001 and ISAE 3402

·       Hands-on knowledge of Azure security (Entra ID, Defender for Cloud, Sentinel), using AI to analyse data

·       Experience with GDPR in a B2B software environment

·       Proactive, self-managing and focused on reducing risk

·       Excellent communication and analytical skills

·       Based in the Netherlands; Dutch-speaking is a strong preference

·       CISSP, CISM or ISO 27001 Lead Implementer and knowledge of the EU AI Act are a plus

32 to 40 hours per week, at least 2 days in the office in the Utrecht region

Salary between €90K and €95K gross per year, depending on experience; one-year contract with the intention of a permanent contract

Interview process: a cultural fit interview, followed by a technical interview

Interested? Please contact me at j.vanbaalen@doghouse.nl