Chief Information Security Officer | AI-Driven Security & Compliance

Academic Key; Naarden; Remote; EUR 150,000 - 210,000; Full time

Job summary

Ockto in Naarden, Netherlands seeks a seasoned CISO to own and evolve the information security programme. You will maintain the ISMS, ISO 27001 certification, and SOC 2 readiness, aligning risk appetite with a security strategy & annual plan.

You’ll translate regulatory developments into concrete standards and steer security across engineering, product, and audits. You’ll lead incident response, supplier risk, and continuous improvement, while communicating clearly with executives, auditors, and

Qualifications

• 8+ years of information security experience.
• Led ISMS end-to-end and audits for ISO 27001 and SOC 2 Type II.
• Experience with regulated financial services and supervision by DNB/AFM (DORA, PSD2, GDPR).
• Solid grounding in cloud security, preferably AWS, and ability to challenge engineers.

Responsibilities

• Own the information security programme and ISMS; maintain ISO 27001 and SOC 2 credibility.
• Translate risk appetite into strategy, plan and standards for teams to implement.
• Monitor regulatory developments (eIDAS2, EU Digital Identity Wallet, NIS2, Cyber Resilience Act, AI Act) and adapt security standards.
• Lead incident response, risk acceptance, and audits; manage supplier risk and continuity arrangements.

Skills

Information security experience

ISMS management

ISO 27001 & SOC 2 audits

Cloud security (AWS)

Risk-based thinking

Clear communication

Independent & principled

English fluent; Dutch advantage

Job description

Ockto in Naarden, Netherlands seeks a seasoned CISO to own and evolve the information security programme. You will maintain the ISMS, ISO 27001 certification, and SOC 2 readiness, aligning risk appetite with a security strategy & annual plan.

You’ll translate regulatory developments into concrete standards and steer security across engineering, product, and audits. You’ll lead incident response, supplier risk, and continuous improvement, while communicating clearly with executives, auditors, and