Information Security Manager

Stake Logic; Eindhoven; Hybrid; EUR 90,000 - 130,000; Full time

Job summary

Stake Logic is seeking an Information Security Manager in Eindhoven to lead the company’s Information Security programme, align it with ISO 27001, and ensure regulatory compliance across markets. You will work with multiple teams to design and implement robust security controls protecting confidentiality, integrity, and availability of information assets.

The role involves risk management, vulnerability management, security awareness, and coordinating audits and incident response with the SOC.

Qualifications

• Minimum 5 years of experience in information security and IT.
• Experience implementing ISO 27001, GDPR, NIST, SOC 2, PCI DSS across markets.
• Professional information security certification (e.g., CISSP, CRISC, CISM).
• Excellent written and verbal English; strong stakeholder management.

Responsibilities

• Take ownership of information security function to support business objectives.
• Lead the risk management programme across the full lifecycle.
• Coordinate the vulnerability management programme end to end.
• Maintain ISMS and ensure regulatory compliance with gaming and government regulations.
• Collaborate with IT teams to design and implement effective security controls.
• Monitor and report Information Security KPIs to leadership.
• Coordinate internal and external audits and remediation activities.
• Liaise with the Security Operations Centre and coordinate incident response.
• Drive security awareness training across the organisation.

Skills

Information Security

IT security

Risk management

Agile

Stakeholder communication

Education

Bachelor's degree in IT or related field

Master's degree advantageous

Tools

ISO 27001 Lead Auditor

Job description

The Information Security Manager is responsible for managing the company’s Information Security programme and coordinating security efforts across the organisation. The role leads the development, implementation, and maintenance of an Information Security Management System (ISMS) aligned with ISO 27001, relevant gambling regulations, and other applicable frameworks.

Working closely with multiple teams across the organisation, the Information Security Manager will prioritise, plan, design, and oversee the implementation of appropriate security controls to strengthen the confidentiality, integrity, and availability of the company’s information assets.

• Take ownership of and lead the company’s Information Security function to support and achieve business objectives.
• Contribute to the development of short-term and long-term global security strategies in support of the Group’s overall business goals.
• Lead the risk management programme across the entire risk lifecycle, from risk assessments through to risk treatment and mitigation.
• Coordinate the vulnerability management programme from end to end.
• Ensure the Information Security Management System (ISMS) operates effectively and meets its defined objectives.
• Maintain Information Security regulatory compliance with applicable gaming and government regulations, contractual obligations, and relevant security standards and frameworks.
• Drive and continuously improve the company’s Information Security awareness and training programme.
• Liaise with the global Security Operations Centre (SOC) and coordinate security incident response and escalations as required.
• Coordinate internal and external audits, assessments, security reviews, and related remediation activities.
• Collaborate closely with IT teams to design, implement, and ensure the effectiveness of technical security controls.
• Monitor and report agreed Information Security KPIs periodically to global security leadership and management.
• Support security-related activities outside normal working hours when required by the systems and services being supported.
• Carry out assignments provided by Global Information Security leadership, IT leadership, and Management.

Qualifications & Requirements

• Minimum 5 years of experience across Information Security and IT domains.
• Strong ability to collaborate effectively with teams across multiple functions and disciplines.
• Comfortable working within a matrix reporting environment.
• Experience implementing Information Security and compliance frameworks such as ISO 27001/27002, GDPR, NIST, SOC 2, PCI DSS, and gambling regulations across multiple markets.
• Hands-on experience conducting risk assessments and developing appropriate risk treatment plans.
• Project and process management experience, preferably within Agile environments.
• Experience developing and maintaining Information Security documentation, including policies, procedures, standards, and guidelines.
• Professional Information Security certification such as CISSP, CRISC, C|CISO, CISM, or another relevant certification.
• ISO 27001 Lead Auditor or Lead Implementer certification is considered an advantage.
• Bachelor’s degree in IT, Business, or a related field. A Master’s degree is considered an advantage.
• Excellent written and spoken English.
• Ability to communicate technical and security-related information clearly and concisely to non-technical stakeholders.
• Strong commitment to continuous personal and professional development.
• Strong organisational and results-oriented mindset.
• Strategic and analytical thinking.
• Excellent interpersonal and stakeholder management skills.
• Ability to take initiative and work effectively under pressure.
• Strong problem-solving and decision‑making abilities.
• Ability to manage multiple priorities and responsibilities simultaneously.
• Clear and effective communication with both technical and non-technical stakeholders.

Travel Requirements

Travel may be required from time to time according to business needs. The role may also require work outside normal working hours in response to security incidents or the operational needs of supported systems.