Information Security Officer

Mendix; Rotterdam; Hybrid; EUR 75,000 - 90,000; Full time

Job summary

Mendix, part of Siemens Digital Industries Software, is seeking a proactive Information Security Officer to protect our information assets and strengthen regulatory compliance across the organization.

You will design and assess controls, monitor frameworks (ISO 27001, GDPR, SOC 2), support audits, and foster a security-conscious culture through clear cross-functional collaboration in a hybrid environment. Requires 3–5 years in information security or compliance and an active certification.

Qualifications

• 3-5 years in Information Security, IT Audit, or Compliance.
• Cloud security in cloud environments (AWS, Azure, GCP).
• Practical experience with ISO/IEC 27001, GDPR, SOC 2, and related frameworks/regulations.
• Familiarity with enterprise data environments and SDLC.

Responsibilities

• Assess the effectiveness of security controls and flag gaps.
• Monitor compliance against frameworks and regulations; report findings.
• Support internal/external audits by gathering evidence.
• Manage collection, storage and archival of security evidence for audits.
• Develop and maintain information security policies, standards, and procedures.
• Communicate security requirements and risks to teams to foster a security culture.
• Collaborate with departments to implement and maintain controls.

Skills

InfoSec principles

Cloud security

Regulatory frameworks

Certifications

Analytical thinking

Communication

Initiative

Collaboration

SDLC familiarity

Job description

About Us:

Mendix, part of Siemens Digital Industries Software, is looking for a proactive Information Security Officer to help protect our information assets, strengthen compliance with evolving regulations, and build a security-first outlook across the organization. It's a phenomenal opportunity to make a real, visible impact on the resilience of our digital infrastructure.

What you'll be doing:

As an Information Security Officer, you will support a range of operational security activities, including:

• Control Design & Operating Effectiveness:Assess the effectiveness of existing security controls against defined risks, and flag gaps or improvement areas.
• Compliance Monitoring & Reporting:Monitor compliance against security frameworks and regulatory requirements (e.g., SOC 1 & 2, ISO 27001, NIST, C5, ISO 42001), conduct gap assessments against applicable laws, regulations, and internal frameworks, and report status and findings to relevant partners.
• Audit Support:Support internal and external audits by gathering, assessing, and providing vital evidence to demonstrate compliance.
• Evidence lifecycle management:Handle collection, secure storage and archival of security evidence to ensure its integrity and availability for audits.
• Policy & Standard Development:Research, establish, and maintain information security policies, standards, and procedures tailored to specific organizational needs and emerging threats.
• Security Culture & Communication:Communicate security requirements, policy updates, and risk information clearly to relevant teams to support a security-conscious culture.
• Control Implementation & Maintenance:Collaborate with applicable departments to ensure security controls are successfully implemented, maintained, and continuously optimized.

What you'll bring:

We're looking for someone with a proven foundation in information security and a proactive, diligent approach.

Skills & Qualifications:

• Experience:3-5 years of dynamic experience in an Information Security, IT Audit, or Compliance role, with a working understanding of core information security principles and practices.
• Cloud Security Expertise:Understanding of security controls, and best practices within cloud environments (e.g., AWS, Azure, GCP). Familiarity with cloud security tools is a plus.
• Framework & Regulation Knowledge:Solid grasp and practical experience with a range of information security standards, frameworks, and regulations (e.g., ISO/IEC 27001 family, GDPR, SOC 2 Trust principles).
• Enterprise IT Familiarity:Familiarity with enterprise data environments, system integrations, and software development lifecycles (SDLC).
• Certifications:An active information security certification (e.g., CISM, CISSP, ISO 27001 Lead Implementer, CompTIA Security+) is required.
• Analytical Thinking:Good analytical and problem-solving skills, with the ability to perform gap analyses and support development of practical solutions.
• Communication:Clear written and verbal communication skills in English, able to explain security topics to both technical and non-technical audiences.
• Initiative & Collaboration:High level of initiative, self-direction, and the ability to work independently while also being a strong team player and collaborating optimally across departments.

Why Us?

At Siemens Software, flexibility is how we work—hybrid by default, built on trust and autonomy. Together, 30,000 people across more than 200 countries build technology that shapes the real world. You'll grow through real projects, strong technical peers, and global mobility, backed by the scale and benefits of an industrial software leader. We're committed to equality and inclusion, and we hire based on merit, skills, and impact. Bring your curiosity and creativity and help us shape tomorrow!

Our Commitment to Equity and Inclusion in our Diverse Global Workforce

We value your unique identity and perspective. We are fully committed to providing equitable opportunities and building a workplace that reflects the diversity of society, while ensuring that we attract the best talent based on qualifications, skills, and experiences. We welcome you to bring your authentic self and transform the everyday with us.

Compensation & Benefits

The salary range for this position is €75,000- €90,000 and this role is eligible to earn incentive compensation. The actual compensation offered is based on the successful candidate's job-related skills, experience, and relevant education/training. Siemens offers health and wellness benefits to employees; you can access the benefits available in your country via the link:https://jobs.sw.siemens.com/benefits/

Siemens Software. Transform the Everyday.