Information Security Officer

Mendix; Netherlands; On-site; EUR 70,000 - 80,000; Full time

Benefits offered by this job

Health and wellness benefits

Continuous learning and development

Collaborative team environment

Job summary

Mendix at Siemens Digital Industries Software is looking for an Information Security Officer. In this role, you will design and evaluate security controls, monitor compliance with standards, and manage evidence lifecycle. You'll play a crucial role in safeguarding information assets and fostering a robust security culture.

The ideal candidate has 3-5 years of experience in Information Security, expertise in cloud security, and relevant certifications. This position offers a salary range of €70,000-€80,000 with additional incentive compensation.

Qualifications

• 3-5 years in Information Security, IT Audit, or Compliance.
• Solid understanding of cloud security principles.
• Excellent communication skills in English.

Responsibilities

• Design and evaluate security controls.
• Monitor compliance with security frameworks.
• Support internal and external audits.
• Manage evidence lifecycle.
• Develop security policies and standards.
• Communicate security risks and policies.

Skills

Information Security

Cloud Security Expertise

Analytical Skills

Communication Skills

Compliance Knowledge

Education

CISM/CISSP/ISO 27001 Lead Implementer/CompTIA Security+

Job description

About Siemens Digital Industries Software

The Mendix organization at Siemens Digital Industries Software is seeking a proactive and expert Information Security Officer to join our dynamic team. In this critical role, you will be instrumental in safeguarding our information assets, ensuring compliance with evolving regulatory landscapes, and encouraging a robust security culture across the organization. This position offers a significant opportunity to contribute to the integrity and resilience of our digital infrastructure.

What you'll be doing

• Control design & Operating Effectiveness: Design and evaluate the effectiveness of security controls, assessing their ability to mitigate risks and recommending improvements to ensure they operate as intended and achieve desired security outcomes.
• Compliance Monitoring & Reporting: Proactively monitor compliance against various security frameworks and regulatory requirements (e.g., NIST, ISO 27001, SOC I & II, C5, ISO 42001). Provide actionable recommendations based on standards and report on progress to relevant stakeholders.
• Audit Support: Support internal and external audits by gathering, assessing, and providing necessary evidence to demonstrate compliance.
• Evidence lifecycle management: Manage the entire lifecycle of security evidence, from collection and secure storage to version control and eventual archival, ensuring its integrity and availability for audits and compliance checks.
• Policy & Standard Development: Research, establish, and maintain robust information security policies, standards, and procedures tailored to specific organizational needs and emerging threats.
• Security Culture & Communication: Communicate effectively about information security risks, standards, and policy updates, fostering a strong security‑conscious culture across the organization.
• Control Implementation & Maintenance: Collaborate with applicable departments to ensure security controls are effectively implemented, maintained, and continuously optimized.

What you'll bring

We are seeking a dedicated professional with a solid foundation in information security and a proactive approach to risk management.

Skills & Qualifications

• Experience: 3-5 years of progressive experience in an Information Security, IT Audit, or Compliance role, demonstrating a solid understanding of information security principles and practices.
• Cloud Security Expertise: Solid understanding of security operations, controls, and best practices within cloud environments (e.g., AWS, Azure, GCP). Experience with cloud security frameworks and tools is highly desirable.
• Framework & Regulation Knowledge: In-depth knowledge and practical experience with a range of information security standards, frameworks, and regulations (e.g., ISO/IEC 27001 family, GDPR, SOC 2 Trust principles).
• Enterprise IT Familiarity: Familiarity with enterprise data environments, system integrations, and software development lifecycles (SDLC).
• Certifications: An independent and active information security certification (e.g., CISM, CISSP, ISO 27001 Lead Implementer, CompTIA Security+) is required.
• Analytical & Problem‑Solving: Exceptional analytical and problem‑solving abilities to perform detailed gap analyses, identify root causes, and develop practical, effective security solutions.
• Communication: Excellent written and verbal communication skills in English, with the ability to articulate complex security concepts clearly to both technical and non‑technical audiences.
• Initiative & Collaboration: High level of initiative, self‑direction, and the ability to work independently while also being a strong team player and collaborating effectively across departments.

Why Siemens?

• Impactful Role: The opportunity to play a pivotal role in protecting Siemens' critical information assets and ensuring compliance in a rapidly evolving digital landscape.
• Professional Growth: Continuous learning and development opportunities to expand your expertise in cutting‑edge information security practices and technologies.
• Collaborative Environment: A supportive and inclusive team environment where your contributions are valued, and collaboration is key to our collective success.

We are Siemens

A collection of over 377,000 minds building the future, one day at a time in over 200 countries. We’re dedicated to equality, and we welcome applications that reflect the diversity of the communities we work in. All employment decisions at Siemens are based on qualifications, merit, and business need. Bring your curiosity and creativity and help us shape tomorrow.

The salary range for this position is €70,000- €80,000 and this role is eligible to earn incentive compensation. The actual compensation offered is based on the successful candidate’s job‑related skills, experience, and relevant education/training. Siemens offers health and wellness benefits to employees; you can access the benefits available in your country via the link: Benefits | Siemens Digital Industries Software.

Join Our Team!

We invite qualified candidates to apply for this challenging and rewarding opportunity to contribute to a world‑class organization.