ISO 27001 Security Governance Lead - Assurance & Risk

DLA Piper; Amsterdam; On-site; EUR 90,000 - 130,000; Full time

Job summary

DLA Piper is seeking an Information Security Governance Lead to drive assurance activities across the firm’s information security program. You will coordinate ISO 27001 certification activities, assess control effectiveness and support the risk management framework with enterprise risk teams.

You will collaborate with stakeholders to ensure controls protect the organization, meet client commitments, and comply with regulatory and contractual obligations within risk tolerance.

Qualifications

• Experience operating or supporting an ISO 27001 Information Security Management System.
• Knowledge of information security control frameworks and assurance methodologies.
• Knowledge of Cyber Essentials Plus.
• Ability to assess the effectiveness of security controls and identify improvement opportunities.

Responsibilities

• Own and maintain the ISO 27001:2022 Information Security Management System.
• Coordinate internal and external certification audits.
• Manage the lifecycle of policies, standards and supporting documentation.
• Facilitate management reviews and support continual improvement activities.
• Ensure security governance processes remain aligned to business objectives and evolving risk.
• Design and operate a programme of security control testing and assurance activities.
• Assess the effectiveness of administrative, technical and operational controls.
• Produce assurance reports and communicate outcomes to relevant stakeholders.
• Monitor remediation activities and support closure of identified weaknesses.
• Develop assurance dashboards, metrics and management reporting.
• Support the ongoing maturity of the security governance framework.
• Review the impact of regulatory, industry and client requirements on the control environment.
• Contribute to internal security awareness and governance initiatives.
• Support external client requests relating to security assurance and certification activities where required.
• Facilitate identification, assessment and evaluation of security risks.
• Provide analysis and recommendations to support risk-based decisions.
• Monitor risk treatment activities and provide challenge where appropriate.
• Support risk acceptance and exception management processes

Skills

ISO 27001 knowledge

Audit coordination

Risk management

Control effectiveness assessment

Security governance frameworks

Regulatory/commercial obligations

Security reporting to stakeholders

Risk-based decision support

Threats and vulnerability awareness

Education

ISO 27001 Lead Implementer/Auditor, CISSP/CISM/CRISC

Tools

ISO 27001 information security management system

Job description

DLA Piper is seeking an Information Security Governance Lead to drive assurance activities across the firm’s information security program. You will coordinate ISO 27001 certification activities, assess control effectiveness and support the risk management framework with enterprise risk teams.

You will collaborate with stakeholders to ensure controls protect the organization, meet client commitments, and comply with regulatory and contractual obligations within risk tolerance.