Information Security Officer

Planon; Nijmegen; On-site; EUR 70,000 - 120,000; Full time

Job summary

Planon, a global leader in building management software, seeks an Information Security Officer to drive security across cloud, product and consulting teams. You will ensure controls, policies and daily operations align with ISO 27001, SOC2 and evolving regulatory needs.

You will act as a central security advocate, translating regulations into actionable improvements and coordinating audits, escalations, and customer security topics across international entities.

Qualifications

• At least 3 years of experience in an information security or ISO role.
• Hands-on experience with ISO 27001 and exposure to SOC2; familiarity with NIS2 and the CRA is a strong plus.
• Able to translate frameworks and policies into practical implementation and execution.
• Comfortable working in a dynamic, international environment.
• Strong stakeholder skills and a collaborative approach across teams.

Responsibilities

• Further maintain and safeguard the ISMS, ensuring alignment with Planon’s certifications and assurance reporting requirements.
• Translate regulatory requirements, including NIS2 and CRA, into practical and actionable improvements for the business.
• Support teams across cloud, product and consulting in applying security in their daily work.
• Act as a central point of contact and sparring partner for teams, supporting ad hoc security questions, audits and escalations.
• Contribute to improving security awareness and consistency across teams and international entities.
• Support customer-related security topics where needed, mainly in complex or escalated situations.

Skills

ISO 27001

SOC2

NIS2

CRA

Stakeholder management

Cloud awareness

Job description

At Planon, the global market leader in building management software, we help mission critical organizations worldwide. You will join a security function that is well established and moving into its next phase of maturity. With ISO 27001, SOC1 and SOC2 in place, and increasing focus on regulatory developments such as NIS2 and CRA, the emphasis is shifting towards strengthening how security is consistently applied across the organization, while also aligning with local standards such as the German BSI C5.

As the business continues to grow internationally, with more complex customer environments and higher expectations around cybersecurity and data protection, there is a clear need to further embed security into daily operations. Not only in policy and frameworks, but in how teams across cloud, product and consulting operate in practice and deliver their services. The role includes an ad hoc component, where priorities can shift based on business and customer needs.

In this role, you play a key part in that transition. You ensure that security frameworks, controls, and policies are not only well designed, but actively implemented, monitored, and improved across the organization.

What you'll be doing

• Further maintain and safeguard the ISMS, ensuring alignment with Planon’s certifications and assurance reporting requirements
• Translate regulatory requirements, including NIS2 and CRA, into practical and actionable improvements for the business
• Support teams across cloud, product and consulting in applying security in their daily work
• Act as a central point of contact and sparring partner for teams, supporting ad hoc security questions, audits and escalations
• Contribute to improving security awareness and consistency across teams and international entities
• Support customer-related security topics where needed, mainly in complex or escalated situations

You are an Information Security Officer who understands both the intent of security frameworks and the reality of applying them in a growing, international organization. You are comfortable navigating between policy and practice and work effectively with different stakeholders toensure security isexecuted and embedded in daily operations.

Qualifications

• At least 3years of experience in an information security or ISO role
• Hands‑on experience with ISO 27001 and exposure to SOC2; familiarity with NIS2andthe CRAis a strong plus
• Able to translate frameworks and policies into practical implementationand execution
• Comfortable working in a dynamic environment
• Strong stakeholder skills and a collaborative approach across teams
• Proactive,pragmaticandable tooperateindependently
• Experience with cloud environments (e.g.AWS or Azure)is a plus