IT Security & Compliance Lead — Remote-First Governance

B Lab; Amsterdam; Hybrid; EUR 51,000 - 61,000; Full time

Benefits offered by this job

Remote-first workplace

B Lab pension scheme

Home workspace stipend

Professional development budget

Job summary

B Lab is seeking an IT Security & Compliance Lead to own security governance across the global network, consolidating controls and raising the security posture proactively. You will drive security maturity by conducting audits, establishing baselines, coordinating incident response, and supporting data protection compliance across regions.

This is a remote-first, full-time role based in Amsterdam, with in-person onboarding and work authorization for the Netherlands.

Qualifications

• 3+ years of experience in information security, IT governance, risk and compliance (GRC).
• Experience conducting security audits, risk assessments and vendor security reviews.
• Knowledge of GDPR, LGPD or other data protection regulations.
• Experience with cloud and SaaS security, including Google Workspace and IAM.
• Ability to explain security risk in plain language to non-technical colleagues.

Responsibilities

• Conduct regular security audits and risk assessments across networks, apps, and processes.
• Establish a security baseline aligned to ISO/IEC 27001:2022.
• Track and report security posture to Technology leadership with clear metrics.
• Coordinate external penetration testing and vulnerability scanning.
• Define access control standards across Google Workspace and Salesforce.
• Own the information security policy set and awareness program (KnowBe4).
• Lead incident response and disaster recovery planning.

Skills

Security governance

Audits & risk assessments

Vendor security reviews

GDPR LGPD

Cloud and SaaS security

Incident response & BCP

Policy communication

Job description

B Lab is seeking an IT Security & Compliance Lead to own security governance across the global network, consolidating controls and raising the security posture proactively. You will drive security maturity by conducting audits, establishing baselines, coordinating incident response, and supporting data protection compliance across regions.

This is a remote-first, full-time role based in Amsterdam, with in-person onboarding and work authorization for the Netherlands.