Information Security Officer

Thirona; Netherlands; Hybrid; EUR 90,000 - 120,000; Full time

Benefits offered by this job

Hybrid working

27 vacation days

8% pension allowance

8% holiday allowance

Job summary

Thirona, a Nijmegen-based health tech company, seeks an Information Security Officer to lead and continually improve the ISMS across the organization.

You will coordinate enterprise‑wide risk management, liaise with authorities, and ensure privacy and product security are upheld per company policies. Strong technical background and stakeholder influence are essential for success.

Qualifications

• 5+ years of experience as an Information Security Officer in regulated or high-stakes environments (healthcare, med-tech, SaaS).
• ISO/IEC 27001 Lead Implementer certification or equivalent experience.
• Solid grounding in information risk management, security governance, audit coordination, and ISMS operations.
• Technical/IT background with hands-on experience (e.g., cybersecurity master’s, systems administration, DevOps).
• Strong communication skills and ability to influence stakeholders at all levels.

Responsibilities

• Own the ISMS: define, supervise, and continuously improve it; plan and coordinate information security audits.
• Coordinate enterprise-wide information security risk management from identification to treatment and monitoring.
• Communicate ISMS policies, controls, and security guidance across teams; raise security awareness.
• Serve as liaison with authorities and industry groups for ISMS topics and certifications.
• Ensure product safety, information security, and privacy are addressed per Thirona policies.

Skills

Information security

Risk management

Security governance

Auditing

Communication skills

Stakeholder management

Education

Bachelor’s or higher in Cyber Security / Information Management / Computer Science

Tools

AWS cloud platforms

Job description

As Information Security Officer, you safeguard the security of medical/healthcare information across Thirona and coordinate our Information Security Management System (ISMS). You’ll define, maintain, and continually improve the ISMS, coordinate risk management, and communicate relevant information security matters throughout the organization. You will also serve as a point of contact for authorities and relevant industry groups, and ensure product safety, information security, and privacy risks are identified and addressed per our policies and procedures. You report to the Chief Operations Officer.

What you’ll do

• Own the ISMS: define, supervise, and continuously improve it; plan and coordinate information security audits.
• Coordinate enterprise‑wide information security risk management, from identification to treatment and monitoring.
• Communicate ISMS policies, controls, and security guidance across teams; raise overall security awareness.
• Serve as liaison with authorities and relevant groups for ISMS topics and certifications.
• Ensure product safety, information security, and privacy (incl. personal data) are handled per Thirona policies and procedures.

What you bring

• 5+ years of experience as an Information Security Officer in a regulated or high‑stakes environment (healthcare, med‑tech, SaaS, etc.).
• ISO/IEC 27001 Lead Implementer certification or demonstrably equivalent implementation experience.
• Solid grounding in information risk management, security governance, audit coordination, and ISMS operations.
• Technical/IT background—e.g., cybersecurity master’s, systems administration, DevOps, or similar hands‑on experience (you can talk shop with engineers)
• Strong communication skills and the ability to influence and align stakeholders at all levels.
• CISM or C|CISO certification (nice-to-have)
• Familiarity with cloud platforms (e.g., AWS) and software development practices (nice-to-have)
• Bachelor’s (or higher) in Cyber Security, Information Management, Computer Science, or comparable field.

How you work

• Innovative, analytical problem‑solver with strong troubleshooting skills.
• Detail‑oriented and committed to continuous improvement.
• Flexible and effective in a fast‑paced, rapidly changing environment.
• Customer‑oriented mindset (internal & external), strong verbal and written communication.

Practical information & benefits

• Thirona counts ~50 employees with international backgrounds; office location: Nijmegen.
• 40‑hour workweek; hybrid working is allowed; part‑time can be considered.
• EU passport or EU work permit required for this position.
• 27 vacation days (based on a 40‑hour contract) and 8% holiday allowance.
• 8% pension allowance with a flexible pension plan.

Timeline

• Applications accepted until 2026-06-28
• First round of interviews: 2026-06-29 – 2026-07-03
• Second round of interviews: 2026-07-03 – 2026-07-10