Information Security officer

Hillebrand Gori - A company of DHL; Haarlem; On-site; EUR 90,000 - 120,000; Full time

Benefits offered by this job

Travel expense reimbursement

Work-from-home allowance

Internet allowance

Pension with BeFrank

Flexible working hours

Professional training

Great Place to Work 2026

Job summary

Hillebrand Gori – A company of DHL, based in the Netherlands near Haarlem, seeks a Regional Information Security Officer to lead the information security program. You will align the regional security posture with DGFF and DHL policies, manage the ISMS, and drive risk‑based improvements across local IT teams and external partners.

You will coordinate with global security strategy, provide advisory services, and ensure compliance and resilience across the region.

Qualifications

• Based in The Netherlands, within commuting distance of Haarlem office.
• Excellent project management and strong written/communication skills.
• Solid understanding of information security concepts, governance and compliance.

Responsibilities

• Manage and contribute to the Information Security Management System at Hillebrand Gori (DGFF ISMS).
• Derive and implement regional information security strategy aligned with DGFF policies.
• Lead regional adherence to DHL information security standards and compliance models.
• Provide subject‑matter expertise and consultancy on information security.
• Act as ambassador for information security to external parties and internal teams.
• Coordinate development of global IT security strategy with IT and business leads.
• Monitor and report compliance to DHL Information Security Standards.
• Develop roadmaps to align existing IT systems with IT security standards.
• Provide awareness, training and education on IT security to regional business and IT.

Skills

Project management

Communication skills

Analytical skills

Diplomacy & negotiation

Multinational experience

Education

Degree or equivalent (Cybersecurity / CS / IT)

CISSP

CISM

CISA

ISO 27001 Lead Auditor

Job description

Information Security Officer – Regional Information Security Officer (RISO)

Hillebrand Gori, specialized in forwarding of Beers, Wines and Spirits, is part of the DHL division Global Forwarding and Freight (DGFF). Although it is a global company, it is seen as a region within DGFF. We are looking for a Regional Information Security Officer (RISO) to lead security for Hillebrand Gori.

The RISO supports the divisional CISO and is responsible for ensuring all information governance risks are appropriately managed and monitored in specific DGFF regions. The role consists of implementing DHL policies, processes, standards and compliance models, and of applying effective information security solutions by finding the right balance between risk protections and providing benefits for the company. Even if the focus is on one specific region, the RISO can work on topics impacting multiple DGFF regions, divisional strategic information security related projects and supports cross‑divisional projects and initiatives.

What will you do?

• Being responsible for the management of, and contributing to the Information Security Management System of Hillebrand Gori (based on ISMS of DGFF).
• Derive, plan and communicate the regional information security strategy based on the DGFF Divisional Information Security strategy, work with the local IT teams on its implementation.
• Implement on regional level the DHL policies, processes, standards and compliance models required to meet legal and regulatory requirements, protect the DGFF customer data, and protect the brand and reputation of DGFF and DHL.
• Provide active leadership through subject‑matter expertise and consultancy on Information Security.
• Be an ambassador of Information Security to external parties, suppliers, customers and across the industry.
• Lead and coordinate the development of global IT security strategy with the process, data, application and technology leads in the relevant business and IT communities.
• Monitor and report compliance to DHL Information Security related Standards.
• Develop a roadmap, in conjunction with the relevant IT systems owners, for bringing existing IT systems in line with the IT security standards.
• Provide awareness, consulting and education to both regional business and IT communities on the importance of IT security.
• Coordinate regional IT security communications to regional management and staff ensuring appropriate visibility to existing and new risks and appropriate mitigation actions and plans.
• Where requested, work with business and customer‑facing IT teams to present global Division IT Security strategy to existing and / or new major customer and supplier accounts.
• Represent DGFF in cross‑divisional projects and working groups.
• Manage regional information security incidents.
• Preparation, execution, and follow‑up of internal and external audits conducted in the region with accountable product and topic owners.
• Contribute to the identification and mitigation of IT and information security risks.
• Support and improve IT continuity and resilience capabilities.
• Support DGFF Data Protection Officer and country Data Protection Official in the region with assessment and implementation of Information Security related Data Protection controls.
• May manage or supervise some professional employees.

What do we expect from you?

• Based in The Netherlands, in a commuting distance from our office in Haarlem.
• Project management skills.
• Strong written and communication skills.
• Sound interpersonal communication.
• Sound analytical and reasoning skills.
• Problem‑solving skills.
• Broad IT service/technical understanding.
• Sound understanding of concepts, processes, and compliance models related to information security.
• Understanding of the concepts of business continuity management.
• Cultural awareness.
• Strong diplomacy and negotiating skills.
• Education:
  • Educated to degree level or equivalent (preferable in Cybersecurity, Computer Science, or Information Technology).
  • Candidates with a formal information security accreditation, e.g. CISSP, CISM, CISA, ISO 27001 Lead Auditor, are preferred.
• Experience:
  • 5 years working experience in an IT role (IT Infrastructure, Application development, IT Security).
  • 2 years minimum in Information Security or related role.
  • 1 year’s minimum working within a multinational – multicultural organization.

Why work at Hillebrand Gori?

With great pride, we can say that Hillebrand Gori is the largest beverages logistics company in the world. Founded in 1844, we are active in over 90 countries. Our success is built on the dedication of our people. While we operate globally with more than 2,200 employees, our IT department is largely located in The Netherlands but also has a presence in Italy, France and India. Within our office around 15 different nationalities work together.

We believe that “Our people and our reputation are our greatest assets.” You will work in an environment where you can make impact, influence strategic technology decisions, and grow both personally and professionally.

Are you looking for a role where you can apply deep expertise and deliver direct business value? Then we’d like to meet you.

What can you expect from us?

• A salary tailored to your qualities and experience.
• A contract for 40 hours.
• Reimbursement for travel expenses, work‑from‑home allowance and internet allowance.
• Pension scheme with BeFrank.
• Flexible working hours and possibility to work from home.
• Personal growth and challenging work with endless possibilities to realize your ambitions in an international environment.
• An informal working environment with innovative colleagues who strive for the very best.
• You can work independently and make us better with your own input.
• Professional training.
• A fun place to work, with room for recreation; weekly and monthly drinks, quarterly company meet‑ups, regular company festivities.
• Work for an organization certified as Great Place to Work 2026.