Information Security Officer - Hybrid (Trust & Payments)

FinDock; Netherlands; Hybrid; EUR 90,000 - 150,000; Full time

Benefits offered by this job

Stock Appreciation Rights

Pension

Hybrid working

Travel allowance

Phone allowance

Volunteer days

Learning budget

Job summary

FinDock, the #1 Customer Payment Management solution built on Salesforce, is seeking an Information Security Officer to mature and drive our information security program. You will own the ISMS, lead certifications, and partner with Product, Engineering and Sales to ensure security is integrated into everything we do.

You will shape strategy, manage risk, and foster a security-first culture across a growing cloud-native SaaS.

Qualifications

• 2 years of experience in information security, GRC, or DevSecOps.
• Knowledge of ISO 27001, SOC 2, frameworks and secure software development practices.
• Proven experience in risk management, including risk assessments, mitigation planning, and maintaining risk registers.
• Hands-on experience with security tooling (SAST, DAST, Secrets Management, Awareness training).
• Excellent communication skills and ability to engage with both technical and executive audiences.
• A proactive, pragmatic, and hands-on mindset, with ownership and accountability.
• Experience in cloud-native SaaS environments, with APIs, CI/CD pipelines and Infrastructure as Code (IaC).
• Experience automating security and compliance processes to reduce manual work and improve visibility.
• Experience running a SOC2 or ISO27001 audit cycle is a pré.

Responsibilities

• Mature and execute FinDock's information security management system.
• Execute a security strategy and multi-year roadmap.
• Manage certifications, leading ISO 27001/SOC 2 cycles and owning internal risk governance.
• Operate the ISMS including policies and processes such as vulnerability management, incident response, awareness sessions and disaster recovery tests.
• Strengthen customer trust by keeping information security up to date and supporting Sales in communicating FinDock's security posture.
• Collaborate cross-functionally with Product, Engineering and Operations to align security with innovation.
• Embed a security-first culture, leading awareness initiatives, training programs, and security simulations.
• Stay ahead of emerging threats and regulatory changes by proactively identifying risks and improving security posture.

Skills

InfoSec experience

GRC

DevSecOps

ISO 27001

SOC 2

Security frameworks

Secure SDLC

Risk management

SAST

DAST

Secrets management

Awareness training

Communication skills

Ownership mindset

Cloud-native SaaS

APIs

CI/CD

IaC

Security automation

SOC2 audit

ISO27001 audit

Job description

FinDock, the #1 Customer Payment Management solution built on Salesforce, is seeking an Information Security Officer to mature and drive our information security program. You will own the ISMS, lead certifications, and partner with Product, Engineering and Sales to ensure security is integrated into everything we do.

You will shape strategy, manage risk, and foster a security-first culture across a growing cloud-native SaaS.