Information Security Leader & ISO 27001 Champion

monaliro; Amsterdam; Híbrido; EUR 67.000 - 106.000; A tiempo parcial

Ventajas ofrecidas por este puesto de trabajo

Flexible working hours

Hybrid work options

24 vacation days

Fully paid pension plan

Free lunch at the office

Personal development budget

Descripción de la vacante

F2F.com is seeking a proactive Head of Information Security to own security strategy while actively reviewing code with engineers and guiding risk decisions. The role spans across engineering, support, safety, and leadership to embed practical security awareness throughout the organisation.

You will lead the ISO 27001 certification journey and build an ISMS that scales with a fast-growing platform, ensuring robust IAM, cryptography and secure data handling.

Formación

• 5+ years of practical experience in software development or security engineering.
• Focused on Python, Node.js and API security.
• Experience running an ISMS (ISO 27001 or NIST CSF) is a strong plus.

Responsabilidades

• Strategy and governance: develop, implement and maintain practical information security policies aligned with business goals.
• Hands-on security engineering: perform code reviews, design secure services and integrate scanning into CI/CD pipelines.
• Incident response: lead preparation, detection, containment and post-incident reviews.
• Security awareness: drive company-wide security culture and practical guidance.

Conocimientos

Python

Node.js

API security

CI/CD

Security engineering

Herramientas

AWS

SAST/DAST/SCA

IaC review

Descripción del empleo

F2F.com is seeking a proactive Head of Information Security to own security strategy while actively reviewing code with engineers and guiding risk decisions. The role spans across engineering, support, safety, and leadership to embed practical security awareness throughout the organisation.

You will lead the ISO 27001 certification journey and build an ISMS that scales with a fast-growing platform, ensuring robust IAM, cryptography and secure data handling.