Security & Compliance Lead

Mendix; Rotterdam; Hybrid; EUR 75,000 - 90,000; Full time

Job summary

Mendix, part of Siemens Digital Industries Software, is seeking a proactive Information Security Officer to protect our information assets and strengthen regulatory compliance across the organization.

You will design and assess controls, monitor frameworks (ISO 27001, GDPR, SOC 2), support audits, and foster a security-conscious culture through clear cross-functional collaboration in a hybrid environment. Requires 3–5 years in information security or compliance and an active certification.

Qualifications

• 3-5 years in Information Security, IT Audit, or Compliance.
• Cloud security in cloud environments (AWS, Azure, GCP).
• Practical experience with ISO/IEC 27001, GDPR, SOC 2, and related frameworks/regulations.
• Familiarity with enterprise data environments and SDLC.

Responsibilities

• Assess the effectiveness of security controls and flag gaps.
• Monitor compliance against frameworks and regulations; report findings.
• Support internal/external audits by gathering evidence.
• Manage collection, storage and archival of security evidence for audits.
• Develop and maintain information security policies, standards, and procedures.
• Communicate security requirements and risks to teams to foster a security culture.
• Collaborate with departments to implement and maintain controls.

Skills

InfoSec principles

Cloud security

Regulatory frameworks

Certifications

Analytical thinking

Communication

Initiative

Collaboration

SDLC familiarity

Job description

Mendix, part of Siemens Digital Industries Software, is seeking a proactive Information Security Officer to protect our information assets and strengthen regulatory compliance across the organization.

You will design and assess controls, monitor frameworks (ISO 27001, GDPR, SOC 2), support audits, and foster a security-conscious culture through clear cross-functional collaboration in a hybrid environment. Requires 3–5 years in information security or compliance and an active certification.