1 week ago

Information Security Officer

Mendix

Rotterdam

1 week ago

Apply

Siemens Digital Industries Software seeks an Information Security Officer for its Mendix organization in Rotterdam. The role involves designing security controls, ensuring compliance with frameworks like ISO 27001 and NIST, and fostering a security culture. Requires 3-5 years of experience in information security, cloud security expertise, and certifications such as CISM or CISSP.

HybridFull-timeMid LevelInformation SecurityIT Audit

Information Security Officer

Apply

HybridFull-timeMid LevelInformation Security

Salary

Not specified

Work Location

Rotterdam, South Holland, Netherlands, NL

Work Model

Hybrid

Experience Required

5 years

Employment Type

Full-time

Experience Level

3-5 years of progressive experience

Core Qualifications

Technical (Must-have)

Information SecurityIT AuditComplianceCloud SecurityAWSAzureGCPISO 27001GDPRSOC 2NISTC5ISO 42001SDLC

Soft Skills

CommunicationAnalyticalProblem-SolvingInitiativeSelf-directionTeam Collaboration

Preferred Qualifications

Technical (Nice-to-have)

CISMCISSPISO 27001 Lead ImplementerCompTIA Security+

Key Responsibilities

•Design and evaluate the effectiveness of security controls.
•Monitor compliance against security frameworks (NIST, ISO 27001, SOC I & II, C5, ISO 42001).
•Support internal and external audits by gathering and providing evidence.
•Manage the lifecycle of security evidence (collection, storage, version control, archival).
•Establish and maintain information security policies, standards, and procedures.
•Communicate about security risks, standards, and policy updates to foster a security culture.
•Collaborate with departments to implement, maintain, and optimize security controls.

Information SecurityCloud SecurityISO 27001ComplianceAuditHybridFull-timeRotterdam

Key Responsibilities

•Design and evaluate the effectiveness of security controls.

•Monitor compliance against security frameworks (NIST, ISO 27001, SOC I & II, C5, ISO 42001).

•Support internal and external audits by gathering and providing evidence.

•Manage the lifecycle of security evidence (collection, storage, version control, archival).

•Establish and maintain information security policies, standards, and procedures.

•Communicate about security risks, standards, and policy updates to foster a security culture.

•Collaborate with departments to implement, maintain, and optimize security controls.