Business Information Security Officer – Act – Zaandam

Act; Zaandam; Hybrid; EUR 90,000 - 130,000; Full time

Benefits offered by this job

Annual bonus

Permanent contract

Training & leadership programs

OV mobility options

32 vacation days

Well-being budget OpenUp

Hybrid work model

Home office setup

Internet expense allowance

Job summary

PwC NL is seeking a senior information security leader to join the CISO office and drive internal control, audit readiness, and compliance programs across the firm. You will implement ISO 27001, SOC 2, NIS2, and DORA while shaping AI governance and risk management strategies.

The role collaborates with auditors, business stakeholders, and technology teams to embed security across the organisation. You will report to senior stakeholders, manage ongoing control testing, evidence collection, and

Qualifications

• 5+ years of experience in information security, IT governance, compliance, risk management, and internal control.
• Hands-on experience implementing ISO 27001, SOC 2, and NIS2.
• Security project management experience is a strong plus.
• Solid understanding of internal audit processes, control testing, and evidence collection for regulators.

Responsibilities

• Join the CISO office and lead on internal security, risk, and control initiatives.
• Translate global policy into practical standards and ways of working for PwC NL.
• Embed security into day-to-day operations and drive resilience, regulatory readiness, and AI governance.

Skills

Information security

IT governance

Compliance

Risk management

Internal control

Tools

ISO 27001

SOC 2

NIS2

DORA

Job description

Job Description Summary

Do you want to shape how PwC Netherlands protects its people, clients, and data in a rapidly changing regulatory landscape? Are you ready to take ownership of security governance, risk, and compliance across one of the country's leading professional services firms? In this role you'll lead the CISO office's work on internal control, audit readiness, and the implementation of frameworks like ISO 27001, SOC 2, NIS2, and DORA. You'll also help shape PwC NL's approach to AI governance and drive our annual security risk assessment. It's a visible role with direct impact on how we manage security risk across the member firm.

This is what you'll do

• You will join the CISO office, a team of informal and ambitious professionals who work closely together on meaningful, firm-wide security topics.
• You will act as a subject matter lead on internal security, risk, and control initiatives, translating global policy into practical standards and ways of working for PwC NL.
• You will work hands-on with auditors, business stakeholders, and technology teams to embed security into our day-to-day operations, while also driving forward strategic programs around resilience, regulatory readiness, and AI governance.
• You will report regularly to senior stakeholders on control status, audit findings, regulatory readiness, and risk themes.
• You will lead the CISO office's work on the internal PwC control framework and act as SME for internal audit, including preparation, evidence testing, remediation tracking, and control maturity improvement.
• You will drive the implementation, upkeep, and continuous improvement of ISO 27001, SOC 2, NIS2, and DORA, and manage the CISO office pillar of PwC NL's internal IT Unified Control Framework.
• You will lead the global and local annual security risk assessment and manage PwC NL's security awareness campaigns.
• You will implement and maintain the firm's approach to AI governance and risk management, including policy development, risk assessment, control definition, and oversight of responsible use.
• You will partner with internal committees and lines of service to ensure security, risk, and control requirements are understood, workable, and embedded across the business.

You recognize yourself in this

• 5+ years of professional experience in information security, IT governance, compliance, risk management, and internal control.
• Hands-on experience implementing and maintaining ISO 27001, SOC 2, and NIS2 (not only advising on them).
• Security project management experience is a strong plus.
• Solid understanding of internal audit processes, control testing, issue remediation, and how to build evidence that meets regulator and auditor standards.
• Knowledge of AI governance, AI risk, and emerging technology controls, plus previous hands-on IT or cybersecurity experience as a strong advantage.
• Previous hands-on IT, or cybersecurity experience during your early career stages is a strong advantage.
• Fluent in Dutch at a professional level.

What we offer

• A competitive salary in line with your experience, an annual bonus (depending on results and personal development), and the opportunity to grow further in your career.
• A permanent contract from day one and a motivating work environment where collaboration with ambitious colleagues and recognition of your contributions are central.
• A wide range of tailor-made training programmes focused on professional growth and leadership development.
• The option to use various mobility providers (OV) via one convenient app.
• 32 vacation days and the option to purchase additional leave.
• At PwC, your well-being is our priority. That's why we offer a personal well-being budget to support your physical and mental health, as well as access to the well-being platform OpenUp.
• The opportunity to work on challenging and meaningful client engagements, use leading technology including AI tools, learn from the best, and be supported through coaching.
• We work as an inclusive team to make real impact.
• The flexibility of hybrid working, including a fully equipped home office and a monthly net expense allowance for internet and other costs.

Peter de Vries - Lead Recruiter

Location: Amsterdam

Type: Full time

Would you like more information about the role at PwC? Peter de Vries is happy to talk with you by email.