IT Security Risk Advisor — 2LOD, AI-Driven Governance

Basic-Fit; Tilburg; Hybrid; EUR 61,000 - 79,000; Full time

Benefits offered by this job

GoodHabitz & LinkedIn Learning

Growth opportunities

Hybrid work

Gym access

Travel reimbursement

Health insurance discount

Home-working allowance

Pension plan

Job summary

Basic-Fit is seeking an experienced IT Security Risk Advisor to strengthen the 2nd Line of Defense and advance security maturity across the organization. You will advise DevOps teams, architects, IT management, and external partners, translating complex security issues into risk assessments and pragmatic guidance.

You report to the IT Quality Officer and collaborate with global stakeholders, including teams in Hoofddorp and Tilburg, to safeguard business-critical platforms used by millions.

Qualifications

• 5+ years of relevant experience in cybersecurity, IT Risk, Security Architecture, or Security Assurance.
• Knowledge of Secure Software Development, Security by Design, and DevSecOps principles.
• Experience with IT Risk Management, security governance, and assurance.
• Knowledge of ISO 27001, CIS Controls, GDPR, NIS2.
• Experience with modern software architectures and cloud platforms.
• Excellent communication skills and the ability to operate at all levels within the organization.
• Excellent command of English; Dutch is nice to have.
• Certified, or actively pursuing, CSSLP; preferably CISSP/CISA/CISM.

Responsibilities

• Developing, implementing, and professionalizing the 2LOD security assurance process for software development.
• Challenging DevOps teams and solution architects on Security by Design and Secure SDLC.
• Contributing to IT Control Framework, security policy, and governance processes.
• Realizing opportunities to professionalize 2LOD IT Security through AI, AI agents, and automation.
• Preparing management reports, risk analyses, and advisory documents for IT management, the Executive Board, and the Audit & Risk Committee.

Skills

Cybersecurity

IT Risk

Security Architecture

Security Assurance

Secure SDLC

DevSecOps

ISO 27001

CIS Controls

GDPR & NIS2

Cloud security

English proficiency

Dutch language

Education

CSSLP

Security certifications (CISSP/CISA/CISM)

Job description

Basic-Fit is seeking an experienced IT Security Risk Advisor to strengthen the 2nd Line of Defense and advance security maturity across the organization. You will advise DevOps teams, architects, IT management, and external partners, translating complex security issues into risk assessments and pragmatic guidance.

You report to the IT Quality Officer and collaborate with global stakeholders, including teams in Hoofddorp and Tilburg, to safeguard business-critical platforms used by millions.