Medior InfoSec Officer: Risk, Audits & DevOps Support

NN Group; Netherlands; On-site; EUR 48,255 - 64,337; Full time

Benefits offered by this job

Salary bracket

13th month

Holiday allowance

BeFrank pension

Training opportunities

NS Travel card

Home office allowance

Internet allowance

Job summary

NN Group is looking for a medior information security officer to proactively manage information security risks within the C&D DevOps teams and product owners, helping them stay in control. You will advise on risk assessments, verify security controls, and support audits across NN's IT controls framework.

You will collaborate with second line, internal audit, and DevOps teams on threat modelling, vulnerability interpretation, and remediation guidance, contributing to secure, compliant IT

Qualifications

• 3–5 years of information security officer experience, preferably in the financial sector.
• Bachelor’s or Master’s in CS or related field; CISSP/CRISC preferred.
• Experience closing IT security audit findings and cloud security experience.
• Ability to advise DevOps teams and conduct risk assessments.

Responsibilities

• Assess, review, and report on ITCF-based security controls.
• Assist in information risk assessments and create control statements.
• Verify control measures and provide improvement recommendations; act as audit contact.
• Perform risk assessments on third-party suppliers.
• Conduct threat modelling and advise on fixes with teams.

Skills

Risk assessments

Threat modelling

Security reviews

Audit findings

Cloud security

Education

Bachelor’s or Master’s degree in CS/IT

Job description

NN Group is looking for a medior information security officer to proactively manage information security risks within the C&D DevOps teams and product owners, helping them stay in control. You will advise on risk assessments, verify security controls, and support audits across NN's IT controls framework.

You will collaborate with second line, internal audit, and DevOps teams on threat modelling, vulnerability interpretation, and remediation guidance, contributing to secure, compliant IT