Information Security Officer

Slashhash; Leiden; Hybrid; EUR 70,000 - 120,000; Full time

Benefits offered by this job

Hybrid work model

Job summary

Samotics is seeking an Information Security Officer to own information security end-to-end in Leiden, Netherlands. The role focuses on managing the ISMS, ISO 27001 audits, and leading a security specialist in a hybrid work setup.

Requires 3+ years of experience, a Bachelor's degree, and strong communication skills. You will drive security awareness, risk management, and collaboration across teams while leveraging AI tools to improve security posture.

Qualifications

• 3+ years of experience in information security.
• Bachelor's degree or equivalent in a related field.
• Strong communication and collaboration across teams.

Responsibilities

• Own information security measures end-to-end from proposal through implementation and improvement.
• Maintain the Information Security Management System (ISMS) and readiness for ISO 27001 audits.
• Oversee security audits and drive annual IT audit as part of the financial audit.
• Educate and raise security awareness across the company.
• Verify third-party suppliers meet security requirements.
• Lead and develop one security specialist and collaborate with teams to surface improvements.
• Use AI tools to enhance security operations and processes.

Skills

Information Security

ISMS

ISO 27001

Auditing

Risk Management

Security Awareness Training

Vendor Security Assessment

Incident Response

Business Continuity Planning

AI Tools

Stakeholder Management

Education

Bachelor's degree

Tools

Python

Software Development

Job description

Samotics is hiring an Information Security Officer to own information security end-to-end in Leiden, Netherlands. The role involves managing the ISMS, ISO 27001 audits, and leading a security specialist, with a hybrid work model. Requires 3+ years of experience, a Bachelor's degree, and strong communication skills.

Technical (Must-have)

• Information Security
• ISMS
• ISO 27001
• Auditing
• Risk Management
• Security Awareness Training
• Vendor Security Assessment
• Incident Response
• Business Continuity Planning
• AI Tools
• Stakeholder Management

Soft Skills

• Communication
• Attention to Detail
• Pragmatic
• Driven
• Open
• Team Player
• Stakeholder Management

Technical (Nice-to-have)

• CCSP
• CISSP
• CISM
• Penetration Testing
• Vulnerability Testing
• Python
• Software Development

Key Responsibilities

• Own information security measures end-to-end, from proposal through implementation to continuous improvement
• Own and maintain the Information Security Management System, keeping it fit for purpose as the company grows
• Oversee information security audits, including the ISO 27001 audit
• Drive annual IT audit as part of mandatory financial audit
• Communicate security goals and measures clearly across the company and provide awareness training to colleagues
• Collaborate with teams across Samotics to surface potential improvements and vulnerabilities
• Verify that third-party suppliers meet security requirements
• Analyse security incidents to find root cause and put preventive measures in place
• Test and improve the business continuity plan
• Use AI tools actively in daily work and continuously improve how the team and function use AI
• Lead and develop one security specialist

Information Security, ISMS, ISO 27001, Auditing, Risk Management, Security Awareness Training, Vendor Security Assessment, Incident Response, Business Continuity Planning, AI Tools, Stakeholder Management, 3 years of relevant experience