Information Security Officer

Siemens; Rotterdam, Den Haag; Hybrid; EUR 75,000 - 90,000; Full time

Job summary

Mendix, part of Siemens Digital Industries Software, is seeking an Information Security Officer to bolster security controls, govern compliance, and drive a security-first mindset across the organization.

You will support a range of security activities, monitor frameworks, and assist audits, while shaping policies and communicating risk across teams in a hybrid work environment with global impact.

Qualifications

• 3-5 years in information security, IT audit, or compliance.
• Active information security certification (e.g., CISM, CISSP, ISO 27001 Lead Implementer, CompTIA Security+) required.
• Solid grasp of ISO/IEC 27001, GDPR, SOC 2 Trust principles.
• Experience with SDLC and enterprise IT environments.
• Clear English communication, written and verbal.

Responsibilities

• Assess effectiveness of existing security controls and flag gaps.
• Monitor compliance with security frameworks and regulatory requirements.
• Support audits by gathering, assessing, and providing evidence of compliance.
• Manage collection, storage, and archival of security evidence for audits.
• Develop and maintain information security policies, standards, and procedures.
• Communicate security requirements and risk information across teams.
• Collaborate with departments to implement and maintain controls.

Skills

Cloud security

Regulatory knowledge

Certifications

3-5 years exp

SDLC familiarity

English communication

Analytical thinking

Team collaboration

Tools

Cloud security tools

Job description

Mendix, part of Siemens Digital Industries Software, is looking for a proactive Information Security Officer to help protect our information assets, strengthen compliance with evolving regulations, and build a security-first outlook across the organization. It's a phenomenal opportunity to make a real, visible impact on the resilience of our digital infrastructure.

What you'll be doing:

As an Information Security Officer, you will support a range of operational security activities, including:

• Control Design & Operating Effectiveness: Assess the effectiveness of existing security controls against defined risks, and flag gaps or improvement areas.
• Compliance Monitoring & Reporting: Monitor compliance against security frameworks and regulatory requirements (e.g., SOC 1 & 2, ISO 27001, NIST, C5, ISO 42001), conduct gap assessments against applicable laws, regulations, and internal frameworks, and report status and findings to relevant partners.
• Audit Support: Support internal and external audits by gathering, assessing, and providing vital evidence to demonstrate compliance.
• Evidence lifecycle management: Handle collection, secure storage and archival of security evidence to ensure its integrity and availability for audits.
• Policy & Standard Development: Research, establish, and maintain information security policies, standards, and procedures tailored to specific organizational needs and emerging threats.
• Security Culture & Communication: Communicate security requirements, policy updates, and risk information clearly to relevant teams to support a security-conscious culture.
• Control Implementation & Maintenance: Collaborate with applicable departments to ensure security controls are successfully implemented, maintained, and continuously optimized.

What you'll bring:

We're looking for someone with a proven foundation in information security and a proactive, diligent approach.

Skills & Qualifications:

• Experience: 3-5 years of dynamic experience in an Information Security, IT Audit, or Compliance role, with a working understanding of core information security principles and practices.
• Cloud Security Expertise: Understanding of security controls, and best practices within cloud environments (e.g., AWS, Azure, GCP). Familiarity with cloud security tools is a plus.
• Framework & Regulation Knowledge: Solid grasp and practical experience with a range of information security standards, frameworks, and regulations (e.g., ISO/IEC 27001 family, GDPR, SOC 2 Trust principles).
• Enterprise IT Familiarity: Familiarity with enterprise data environments, system integrations, and software development lifecycles (SDLC).
• Certifications: An active information security certification (e.g., CISM, CISSP, ISO 27001 Lead Implementer, CompTIA Security+) is required.
• Analytical Thinking: Good analytical and problem-solving skills, with the ability to perform gap analyses and support development of practical solutions.
• Communication: Clear written and verbal communication skills in English, able to explain security topics to both technical and non-technical audiences.
• Initiative & Collaboration: High level of initiative, self-direction, and the ability to work independently while also being a strong team player and collaborating optimally across departments.

Why Us?

At Siemens Software, flexibility is how we work—hybrid by default, built on trust and autonomy. Together, 30,000 people across more than 200 countries build technology that shapes the real world. You'll grow through real projects, strong technical peers, and global mobility, backed by the scale and benefits of an industrial software leader. We're committed to equality and inclusion, and we hire based on merit, skills, and impact. Bring your curiosity and creativity and help us shape tomorrow!

Our Commitment to Equity and Inclusion in our Diverse Global Workforce

We value your unique identity and perspective. We are fully committed to providing equitable opportunities and building a workplace that reflects the diversity of society, while ensuring that we attract the best talent based on qualifications, skills, and experiences. We welcome you to bring your authentic self and transform the everyday with us.

The salary range for this position is €75,000- €90,000 and this role is eligible to earn incentive compensation. The actual compensation offered is based on the successful candidate's job-related skills, experience, and relevant education/training. Siemens offers health and wellness benefits to employees; you can access the benefits available in your country via the link: https://jobs.sw.siemens.com/benefits/

Siemens Software. Transform the Everyday.