Information Security Officer

Prime Vision B.V.; Delft; On-site; EUR 70,000 - 110,000; Full time

Benefits offered by this job

Open workspace

Profit-sharing

Flexible hours

Additional vacation days

Snacks & Grand Café

In-house gym & chair massage

Job summary

Prime Vision B.V. in Delft, the Netherlands, seeks an Information Security Officer who translates security requirements into workable measures and partners with IT, product development, sales and project teams to embed security into daily operations and customer projects.

You will maintain the Information Security Management System, lead audits and risk assessments, and help ensure compliance with regulations such as the Cyber Resilience Act and the EU AI Act, while guiding secure design and

Qualifications

• Bachelor's or master's degree in cybersecurity or related IT field.
• 5-7 years of information security experience.
• Experience with information security management systems and audits.
• Strong knowledge of ISO 27001, ISAE 3402, GDPR and related standards.
• Ability to discuss security topics with both technical and non-technical stakeholders.
• Fluency in Dutch and English.

Responsibilities

• Develop, maintain and improve information security policies and guidelines.
• Lead internal and external audits and certifications.
• Collaborate with sales, project and tech teams on security requirements.
• Perform risk assessments and manage risk treatment plans.
• Review designs from security and risk perspective, including AI considerations.
• Support secure development practices and vulnerability management.
• Lead security awareness initiatives.

Skills

Information security

Governance & compliance

Audits

Risk assessment

Security architecture

Vulnerability management

Secure software development

AI security

Dutch & English

Education

Bachelor's or Master's in cybersecurity

Tools

ISO 27001

ISAE 3402

GDPR

Job description

Information Security Officer

Location: Delft, the Netherlands

Are you passionate about information security and technology? Do you enjoy working with both technical and non-technical teams to make security practical, effective and part of the way people work? In this role, you help translate security requirements into workable measures and support teams in building security into daily operations, products and customer projects.

Description

At Prime Vision, we develop intelligent automation solutions for postal, logistics and e-commerce customers worldwide. Security is therefore not only an internal requirement, but an important part of the trust we build with customers and the quality of the solutions we deliver.

As Information Security Officer, you act as a trusted advisor and bridge the gap between security governance and technical implementation. You work closely with IT, product development, sales and project teams to translate security requirements into clear, workable measures that fit the way teams design, deliver and operate our solutions.

You play a leading role in maintaining and improving our Information Security Management System and help ensure compliance with relevant regulations such as the Cyber Resilience Act and the EU AI Act.

You manage the audit program, perform risk assessments, evaluate suppliers and lead improvement activities.

You bring technical understanding and contribute to topics such as security architecture, vulnerability management and secure software development, helping ensure that security is embedded into our products, services and internal processes.

You review technical designs from a security and risk perspective, discuss them with specialists and explain why specific security measures matter, especially as we increasingly embed AI into our solutions.

You are proactive, analytical and pragmatic. You take ownership, work independently and enjoy turning requirements into practical improvements that help teams work securely and efficiently.

You will be part of the Security Team and will have plenty of opportunity to share your ideas, improve our security approach and make a visible impact across Prime Vision and our customers.

The job

• Develop, implement and maintain information security policies, standards and guidelines to protect company and customer information.
• Maintain and improve the Information Security Management System and support continuous improvement of security processes.
• Manage and participate in internal and external audits, including certifications and assurance frameworks such as ISO 27001, ISAE 3402 and IRAP.
• Collaborate with sales, project and technical teams on security requirements for proposals, customer projects and product development.
• Conduct supplier assessments, application risk analyses and security reviews for new tooling and services.
• Monitor relevant security and privacy regulations and translate requirements into practical policies, action plans and controls.
• Work with development teams to support secure development practices, vulnerability management and responsible use of AI technologies.
• Perform risk assessments, maintain the risk register and follow up on risk treatment plans.
• Support and coordinate security incident response activities.
• Identify opportunities to optimize, automate and evidence security controls.
• Lead security awareness initiatives to strengthen security culture across Prime Vision.

What we offer

We offer a role with broad responsibility, room for initiative and the opportunity to contribute directly to the maturity of information security at Prime Vision. You will work in an international, technology-driven environment where practical improvements, collaboration and continuous learning are valued. In addition, we offer a comprehensive range of benefits:

• An open and inclusive workspace with colleagues from more than 20 different nationalities.
• A globally oriented company with an equally global client base.
• A full range of digital tools will be at your disposal, such as a laptop and a smartphone of choice.
• A competitive salary.
• The possibility to work flexible hours.
• A profit-sharing scheme for all employees.
• The option to purchase additional vacation days on top of the 25 standard holiday allowance.
• Extra perks: a wide range of snacks and excellent coffee in our cozy Grand Café, options for chair massage, hairdresser, and training sessions by a personal trainer in our in-house gym.

Your profile

You are an experienced information security professional who is comfortable working at the intersection of governance, compliance and technical security. You can lead discussions with auditors, management and technical specialists, and translate complex requirements into clear, risk-based and practical security measures.

You bring

• A bachelor’s or master’s degree in cybersecurity, information technology, network engineering, computer science, business IT or a related IT or security field.
• 5-7 years of relevant experience in an information security role.
• Demonstrable experience maintaining and improving an Information Security Management System and managing internal and external audits.
• Strong working knowledge of frameworks, standards and regulations such as ISO 27001, ISAE 3402, GDPR and other relevant security or assurance requirements.
• Working knowledge of security architecture, network security, identity and access management, vulnerability management and secure software development practices, with the ability to discuss these topics with specialists from a security perspective.
• Experience reviewing technical design and application architectures from a security and risk perspective.
• Experience performing risk assessments, defining mitigating controls and following up on risk treatment plans with business and technical stakeholders.
• The ability to challenge constructively, ask the right technical questions and explain security decisions clearly to different audiences.
• Strong analytical skills, a critical mindset and the ability to stay pragmatic, solution-oriented and focused on continuous improvement.
• Fluency in Dutch and English.

Nice to have

• Certifications such as CISM, CISSP, CRISC, ISO 27001 Lead Implementer or ISO 27001 Lead Auditor.
• Experience in a Data Protection Officer or privacy advisory role.
• Experience with zero trust principles and secure-by-design product development.
• Experience with security requirements in customer projects, software products, AI-related initiatives or regulated environments.
• Knowledge of the latest regulations such as the Cyber Resilience Act, NIS2 or the EU AI Act.