Group Information Security Leader & Risk Architect

TBAuctions; Amsterdam; On-site; EUR 110,000 - 120,000; Full time

Benefits offered by this job

Bonus scheme

Pension scheme

25 vacation days

Laptop and iPhone

Training opportunities

Job summary

TBAuctions is seeking an experienced Group Information Security Officer to design and implement our security standards across the group, including brands and the risk/compliance team. You will lead the Information Security Office and drive secure software, data and cloud practices across regions.

You will lead risk assessments, incident response and compliance initiatives, ensuring a security mindset is embedded in business and development teams.

Qualifications

• 8+ years of experience in information security management.
• Ability to educate both technical and non-technical audiences.

Responsibilities

• Own and continuously develop information security strategy, policies and standards across regions and brands.
• Act as the single point of accountability for information security including cloud, application, infrastructure and data security.
• Lead risk assessments, threat modeling and vulnerability management with Product and Tech teams.
• Own security incident response, including detection, escalation and post-incident reviews.
• Support future compliance projects (ISO 27001/2, GDPR, NIS2).
• Manage third-party and supplier security and contract clauses.
• Drive security awareness and training across the organization.
• Provide reporting to executive management on risk posture, incidents and remediation.

Skills

Analytical thinking

Excellent communication

Self-driven

Education

CS degree or related field

InfoSec cert

Job description

TBAuctions is seeking an experienced Group Information Security Officer to design and implement our security standards across the group, including brands and the risk/compliance team. You will lead the Information Security Office and drive secure software, data and cloud practices across regions.

You will lead risk assessments, incident response and compliance initiatives, ensuring a security mindset is embedded in business and development teams.