Information Security Officer

Valid Netherlands; Eindhoven; On-site; EUR 60,000 - 80,000; Full time

Benefits offered by this job

Leased car

Laptop and phone plan

Flexible working arrangements

Inspiring work environment

Job summary

Valid Netherlands in Eindhoven is seeking an Information Security Officer. In this role, you will ensure compliance with ISO 27002, DORA, GDPR, and NIS2, while translating security policies into practical solutions. You will manage the Information Security Management System and coordinate internal and external audits.

The ideal candidate has a HBO level in IT or Security, at least 3 years of relevant experience, and strong skills in communication and analysis. The organization offers a competitive salary, flexibility in working location, and an inspiring work environment.

Qualifications

• At least 3 years of experience with ISO 27001/27002 implementations and audits.
• Experience managing an ISMS in an operational environment.
• Knowledge of relevant laws and regulations such as GDPR, NIS2, and DORA.

Responsibilities

• Develop, implement, and manage Information Security Management System according to ISO 27002.
• Draw up security policies and procedures and keep them up to date.
• Perform risk analyses and monitor implementation of mitigating measures.
• Monitor compliance with GDPR, NIS2, and DORA.
• Prepare audit documentation and ensure timely follow-up on findings.
• Coordinate security incident management and advise internal teams.

Skills

Strong communication skills

Analytical skills

Persuasiveness

Results-oriented

Education

HBO working and thinking level in IT, Security, or Compliance

Tools

Microsoft technologies

Job description

Are you the ISO who ensures that our organization complies with ISO 27002, DORA, GDPR, and NIS2?
As Information Security Officer, you are responsible for translating, maintaining, and improving our information security policy for the operational departments. You are the central point of contact for internal and external audits and play a key role in ensuring the confidentiality, integrity, and availability of our information.

What will you do?

As our ISO, you have strong communication skills and persuasiveness, enabling you to translate policy into practical, workable solutions. With your analytical skills and eye for detail, you work proactively and results-oriented. You are a connector who gets operational departments on board with security measures and enjoys working in multidisciplinary teams. You are independent, work in a structured manner, and know how to set priorities, but also know when to escape issues.

In short, this is a challenging position within a dynamic organization, where you will have a direct impact on our information security. Your responsibilities:

• Management and further development of our ISMS: you will develop, implement, and manage our Information Security Management System in accordance with ISO 27002 and be responsible for obtaining and maintaining our certification;
• From policy to practice: You draw up security policies and procedures, keep them up to date, and continuously monitor the effectiveness of security measures.
• Managing risks: You perform risk analyses, draw up mitigating measures, and monitor their implementation. By identifying vulnerabilities and threats, you ensure that the agreed level of security is maintained.
• Monitoring compliance: You monitor compliance with laws and regulations (GDPR, NIS2, DORA) and report on this to management.
• Coordinating audits: You prepare audit documentation, monitor the progress of improvement actions, and ensure timely follow-up on findings.
• Embedding security in the organization: You coordinate security incident management and advise internal teams on security best practices in understandable language.

What we offer:

• A competitive salary based on your knowledge and experience;
• A leased car, laptop and phone plan to ensure that your work can be done properly at all times.
• Flexible working is possible both in the office and at home;
• Ability to work with the latest Microsoft technologies;
• An inspiring work environment with professional colleagues and room for personal input.

What do you bring to the table:

• HBO working and thinking level in the field of IT, Security, or Compliance;
• At least 3 years of experience with ISO 27001/27002 implementations and audits;
• Experience managing an ISMS in an operational environment;
• Knowledge of relevant laws and regulations such as the GDPR, NIS2, and DORA.

Do you recognize yourself in this vacancy and way of working? Then we would like to get in touch with you.

December 23, 2025