Group InfoSec Officer: Strategy, Risk & Compliance

TBAuctions; Amsterdam; Hybrid; EUR 110,000 - 120,000; Full time

Benefits offered by this job

Yearly salary incl holiday allowance

Bonus scheme

Pension scheme

25 vacation days

Laptop and iPhone

Training opportunities

Team-oriented culture

Job summary

TBAuctions in Amsterdam seeks an experienced Group Information Security Officer to design and implement group security standards across brands and regions, and to lead the Information Security Office with risk and compliance teams.

You will direct security initiatives, conduct risk assessments, lead threat modeling, manage incidents, ensure ISO 27001/2, GDPR and NIS2 compliance, and oversee third-party security, while educating teams and reporting to executives.

Qualifications

• Degree in computer science or a technology-related field.
• Professional information security certification.
• More than 8 years of information security management experience.
• Solid understanding of relevant laws, regulations and standards (NIS2, ISO27001/2).
• Excellent problem-solving and analytical skills.
• Strong communication in English.

Responsibilities

• Own and develop information security strategy, policies, and standards across regions and brands.
• Act as the single point of accountability for information security (cloud, application, infrastructure, data).
• Lead risk assessments, threat modeling, vulnerability management; maintain security risk register.
• Own security incident response from detection to remediation.
• Assist with compliance projects (ISO 27001/2, GDPR, NIS2).
• Manage third-party and supplier security, due diligence and contracts.
• Drive security awareness and training across the organization.
• Provide reporting to executive management on risk posture and incidents.

Skills

Information security

Security leadership

Risk assessment

Threat modeling

Incident response

Security training

Cloud security

Data security

Education

Bachelor's degree in computer science

Professional information security certification

Job description

TBAuctions in Amsterdam seeks an experienced Group Information Security Officer to design and implement group security standards across brands and regions, and to lead the Information Security Office with risk and compliance teams.

You will direct security initiatives, conduct risk assessments, lead threat modeling, manage incidents, ensure ISO 27001/2, GDPR and NIS2 compliance, and oversee third-party security, while educating teams and reporting to executives.