Information Security Officer

Datasnipper; Netherlands; On-site; EUR 70,000 - 110,000; Full time

Job summary

DataSnipper in the Netherlands is seeking an Information Security Officer to lead security controls and policy stewardship across the company.

You will work with engineering, product, and other teams to strengthen secure development, manage risk, and support audits such as SOC 2 and ISO 27001 while training staff.

This role emphasizes proactive threat management, incident response, and vendor risk oversight to protect customer data and ensure system resilience.

Qualifications

• 2–5 years of information security experience.
• Experience implementing SOC 2 and ISO 27001 controls.
• Familiarity with GDPR and EU regulations.
• Strong communication with stakeholders.
• Ability to drive audits and evidence collection.

Responsibilities

• Be the subject matter contact for security controls within DataSnipper.
• Maintain internal security policies and support SOC 2 and audits.
• Protect data and ensure resilience of IT infrastructure.
• Collaborate with all departments and security team.
• Define, implement, and maintain information security policies.
• Operate risk assessments and track remediation actions.
• Support compliance with SOC 2, ISO 27001, GDPR and audits.
• Deliver employee training to promote guidelines.
• Respond to security incidents and coordinate with teams.
• First responder for information security requests from stakeholders.
• Work with engineering and product teams to improve secure development.

Skills

Information security management

Risk assessment

SOC 2

ISO 27001

GDPR

Incident response

Audits

Vendor risk management

Security training

Cross-functional collaboration

Tools

Vanta

Job description

• As an Information Security Officer, you will be a subject matter contact for security controls within DataSnipper
• You will help maintain internal security policies, operate internal security risk activities, and support SOC 2 and other audit activities
• You will play an important role in protecting DataSnipper’s information systems, product, and customer data from security threats while ensuring the resilience and availability of our IT infrastructure
• You will work closely with all departments, alongside the other Security team members
• Contribute to defining, implementing, and maintaining information security policies
• Operate risk assessment and internal security control activities, including tracking and monitoring remediation actions
• Support compliance with SOC 2, ISO 27001, GDPR, and other relevant frameworks; actively contribute to the annual SOC 2 audit process, including evidence collection and day-to-day auditor communication
• Support and deliver employee training and awareness initiatives to drive adoption of guidelines and policies
• Provide support for client requests related to the security topics
• Monitor and respond to security incidents, ensuring timely resolution and appropriate reporting collaborating with the relevant teams
• First responder for the information security requests from the internal DataSnipper stakeholders, escalate where necessary
• Collaborate with engineering and product teams to improve secure development processes

Solid understanding of key security domains, including identity and access management, network and cloud security, and secure development practices

Working knowledge of information security and compliance frameworks (e.g., SOC reports, ISO 27000 series, COBIT), as well as IT and cloud security audits

Practical experience with information security control and testing process

Strong communication and problem-solving skills, with the ability to collaborate effectively with stakeholders across teams and grow into broader ownership

Practical experience with vendor risk assessments and third-party due diligence

Proactive, self-directed mindset with a strong track record of delivering tangible results

2–5 years of experience in information security, with demonstrated ownership of compliance frameworks (SOC 2, ISO 27001) and associated audits

Experience with Vanta

Relevant security certifications: CISSP, CISM, CISA, CCSP, Azure security certifications etc

Familiarity with EU security regulations such as EU AI Act, Cybersecurity Act etc