Head of Information Security & Risk Strategy

ACT Group; Amsterdam; On-site; EUR 120,000 - 150,000; Full time

Job summary

ACT Group is strengthening its data, technology and AI capabilities as it builds a more integrated digital platform alongside its core environmental commodities trading and market-making business. The Senior Information Security Officer will own ACT’s enterprise information security strategy and governance, spanning core operations, emerging digital ventures and client-facing technology platforms.

The role focuses on defining risk appetite, leading responses to threats, embedding security by

Qualifications

• Bachelor’s degree in Information Security, Computer Science or related field.
• 10–15 years of progressive information security experience, including at least 5 years in a senior role.
• Experience across incident response, cloud and infrastructure security, product/application security and regulatory compliance.
• Experience in trading, financial services, commodities or data-intensive environments is advantageous.
• Certifications such as CISSP, CISM or CISA are desirable.
• Strong analytical, communication and stakeholder-management skills.

Responsibilities

• Own the Group-wide information security strategy and governance across core and digital platforms.
• Embed security-by-design into new products and platforms and oversee security throughout the SDLC.
• Lead enterprise security risk management, including risk assessments and third-party risk.
• Secure cloud/infrastructure with Zero-Trust controls in a hybrid environment.
• Govern AI security and data platform risk, including model/data-exposure risks.
• Lead the security function and drive a strong security culture across the Group.

Skills

Security leadership

Risk management

Communication skills

Stakeholder management

Cloud security

Regulatory compliance

Education

Bachelor’s degree in Information Security/Computer Science

Master’s degree (advantage)

Job description

ACT Group is strengthening its data, technology and AI capabilities as it builds a more integrated digital platform alongside its core environmental commodities trading and market-making business. The Senior Information Security Officer will own ACT’s enterprise information security strategy and governance, spanning core operations, emerging digital ventures and client-facing technology platforms.

The role focuses on defining risk appetite, leading responses to threats, embedding security by