Chief Trust & Security Officer

Ockto; Naarden; On-site; EUR 61,000 - 76,000; Full time

Benefits offered by this job

Salary €5500–€6800 per month

MacBook Pro and smartphone

Phone and travel allowance

Great home and remote working

Lunch fee

Development budget

Job summary

Ockto is hiring a Chief Information Security Officer to own the information security program, maintain ISO 27001 and SOC 2, and align with evolving EU regulations. You will work closely with the Product & Trust Director and CEO to set security strategy, drive risk-based decisions, and lead a privacy and security-driven culture across a scale-up platform.

The role emphasizes leading incident response, third-party risk, and security governance in a banking-adjacent environment, with a focus on

Qualifications

• At least 8 years in information security, including 3 years leading a security function.
• Experience running ISMS end-to-end and leading ISO 27001 and SOC 2 Type II audits.
• Familiarity with DORA, PSD2, GDPR and supervision by DNB or AFM.
• Strong cloud security background (AWS) and ability to challenge engineers and judge designs.
• Fluent English; Dutch language is a strong advantage.

Responsibilities

• Own ISMS and security policy framework; maintain ISO 27001 and SOC 2 Type II credibility.
• Translate risk appetite into security strategy, annual plan and standards.
• Monitor EU regulatory developments (eIDAS2, EU Digital Identity Wallet, NIS2, AI Act) and adapt security policies.
• Verify and challenge engineering controls; approve risk acceptance and perform pen tests.
• Lead incident response and regulator notifications; drive root-cause fixes.
• Oversee security risk in the supply chain per DORA.
• Ensure continuity and recovery arrangements are tested with Engineering.
• Measure security by performance in addressing findings and incidents.
• Represent security to clients, auditors and regulators (DNB, AFM).
• Foster a security-aware culture across the organisation.

Skills

ISMS ownership

Security strategy

Risk management

Stakeholder communication

Cloud security (AWS)

Tools

AWS

Job description

Ockto is hiring a Chief Information Security Officer to own the information security program, maintain ISO 27001 and SOC 2, and align with evolving EU regulations. You will work closely with the Product & Trust Director and CEO to set security strategy, drive risk-based decisions, and lead a privacy and security-driven culture across a scale-up platform.

The role emphasizes leading incident response, third-party risk, and security governance in a banking-adjacent environment, with a focus on