Security Officer

As a Security Officer, you play a key role in developing, implementing, and continuously improving our Information Security Management System (ISMS). You are responsible for strengthening security governance and ensuring that policies, controls, and security processes are effectively embedded within the organization.

You collaborate closely with technical teams, operational management, and other stakeholders to identify risks, improve security maturity, and ensure compliance with relevant standards and regulations.

Your responsibilities

• Perform and coordinate internal security audits, risk assessments, and vulnerability analyses;

• Develop, review, and maintain security policies, procedures, and controls;

• Manage and improve ISMS governance and the PDCA cycle;

• Advise operational management on security risks, compliance requirements, and improvement initiatives;

• Monitor compliance with frameworks and standards such as ISO 27001, NIS2, NIST, SOC1, and SOC2;

• Contribute to and coordinate security-related projects and perform security reviews (including vendor assessments);

• Support external audits and certification processes;

• Contribute to the development and delivery of security awareness initiatives and trainings;

• Identify opportunities to improve security processes and proactively drive improvements.

You work closely with Security Engineers, the Security Coordinator, and other teams to ensure continuous improvement and maintain a strong security posture.

The team

You will be part of our security team, working alongside Security Engineers, Facility Management, and Hospitality. In this role, you act as an important link between operational teams, technical specialists, and leadership, contributing to process improvement, risk management, and secure service delivery.

Your profile

• Bachelor’s degree in IT, Cyber Security, Information Security, or a related field, or equivalent experience;

• 3–5 years of experience in information security, governance, risk, or compliance;

• Experience with ICT and/or security audits;

• Knowledge of security frameworks such as ISO 27001, NIS2, NIST, SOC1, and SOC2;

• Relevant certifications (or working towards them), such as CISSP, CISM, CISA, or ISO 27001 certifications;

• Experience with projectmanagement methodologies such as Prince II or Agile is a plus;

• Strong analytical and structured working style;

• Excellent communication and stakeholder management skills;

• Reliable, detail-oriented, and proactive in driving security improvements;

• Fluent in Dutch (required) and English.

Location

• Headquarters in Alkmaar

• Hybrid working possible (up to one day per week from home)

• Willing to travel regularly to our office in Amsterdam

In this role, you will have the opportunity to actively contribute to the further professionalization of security within the organization and make a real impact on both processes and culture.