As Information Security Officer you combine business expertise and cybersecurity, ensuring security for our systems aligned with workability to be able to meet organizational goals. Key responsibilities include identifying and assessing risks based on the PostNL Cyber Risk Management process and advising PostNL teams on the implementation of tailored security controls and mechanisms. You will manage security risks by identifying potential security vulnerabilities that may affect operations and mitigate them with both business and IT stakeholders. You drive collaboration between business IT teams and cybersecurity teams/professionals, in order to safeguard data and critical assets.
Daarom kies je als Information Security Officer - Team Data & Application voor PostNL
- Visibility: You work as a security specialist and ensure that the IT teams can develop the IT systems in a secure and workable manner. Security is crucial for PostNL and is high on the agenda of (IT) board members. The work is important for PostNL and gives you great visibility.
- Challenge: You are a passionate promoter of the need for information security controls and mechanisms towards PostNL IT teams. You advise management on the current state of the IT landscape in terms of IT Security. In addition, you work with various IT teams at PostNL to increase the Security level of their systems in a workable way.
- Good atmosphere: You work together with colleagues who dare to seize opportunities and help each other move forward.
- Freedom: You will work hybrid, both from home and from our vibrant, state‑of‑the‑art office in the historic Stationspost building (next to Holland Spoor station).
- Responsibility: You’ll be a promoter and knowledge holder of Cybersecurity within PostNL, and therefore take responsibility to help our IT teams to improve the security level of their systems.
- Development opportunities: You will have plenty of opportunities to follow training programs and grow into other positions or departments.
Dit is jouw rol
The Data & Applications team is part of the PostNL Cyber Security Office (CSO). We serve as a second line department and are in close contact with many other teams inside PostNL (e.g. IT teams of the PostNL business units, Privacy Office, Head Office IT and Data Foundations). The team creates company‑wide security policies, tests security measures and advises on projects and IT security‑related topics. You will shape the implementation of the policy in direct cooperation with the stakeholders inside and outside the IT domain. The main purpose of the role is to protect the organization from harm due to breach of security of corporate and/or customer data.
Skills
- You have a bachelor/master degree in a relevant field, such as business administration or computer science.
- You have 2-3 years' experience with organizations working in a cloud environment and have knowledge of (cybersecurity) risk management.
- You have demonstrable knowledge of ISO27001, audit reporting and NIST/CSF/CIS.
- You have demonstrable knowledge of NIS-2 and GDPR legislation.
- Having obtained security certifications such as CISSP, CCSP, CISM, CISA or CRISC is considered a plus.
- Excellent English written and verbal communication skills. Proficiency in Dutch language is considered a plus.
Benefits
- Salary between €4,588.87 and €6,498.75 gross per month based on 37 hours (32 hours is also possible).
- Hybrid working and flexibility in organising your time. If you work from home two or more days a week, you receive a €45 net monthly allowance.
- 8% holiday allowance and 25 vacation days based on full‑time employment.
- Commuting reimbursement through NS Business Card or kilometre allowance.
- A good pension scheme through the PostNL pension fund.
- Laptop (Mac or Windows) and smartphone.
- Training and development options via the PostNL Academy.
- Discounts on travel, events and products.