Security Governance Lead (BISO): ISO27001, SOC 2, AI Risk

PwC Nederland; Amsterdam; Hybrid; EUR 120,000 - 180,000; Full time

Benefits offered by this job

Competitive salary

Annual bonus

Permanent contract

Training programs

Mobility with OV app

32 vacation days

Well-being budget

OpenUp access

Hybrid work model

Job summary

PwC Netherlands is seeking a seasoned security governance lead to steward the CISO office’s programs across internal controls, audits, and regulatory readiness. You will translate global policy into actionable standards for PwC NL and work closely with auditors, stakeholders, and technology teams to embed security in day-to-day operations.

You will drive resilience, AI governance, and risk assessment initiatives with visibility to senior leadership, while coordinating with committees to ensure

Qualifications

• 5+ years of professional experience in information security, IT governance, compliance, risk management, and internal control.
• Hands-on experience implementing ISO 27001, SOC 2, and NIS2.
• Solid understanding of internal audit processes, control testing, issue remediation, and how to build evidence that meets regulator and auditor standards.
• Knowledge of AI governance, AI risk, and emerging technology controls, plus previous hands-on IT or cybersecurity experience as a strong advantage.
• Fluent in Dutch at a professional level.

Responsibilities

• Lead the CISO office's work on the internal PwC control framework and act as SME for internal audit, including preparation, evidence testing, remediation tracking, and control maturity improvement.
• Drive the implementation, upkeep, and continuous improvement of ISO 27001, SOC 2, NIS2, and DORA, and manage the CISO office pillar of PwC NL's internal IT Unified Control Framework.
• Lead the global and local annual security risk assessment and manage PwC NL's security awareness campaigns.
• Implement and maintain the firm's approach to AI governance and risk management, including policy development, risk assessment, control definition, and oversight of responsible use.
• Partner with internal committees and lines of service to ensure security, risk, and control requirements are understood, workable, and embedded across the business.

Skills

Information security

IT governance

Compliance

Risk management

Internal control

ISO 27001

SOC 2

NIS2

DORA

AI governance

Audits

Policy development

Tools

ISO 27001

SOC 2

NIS2

DORA

AI governance tools

Job description

PwC Netherlands is seeking a seasoned security governance lead to steward the CISO office’s programs across internal controls, audits, and regulatory readiness. You will translate global policy into actionable standards for PwC NL and work closely with auditors, stakeholders, and technology teams to embed security in day-to-day operations.

You will drive resilience, AI governance, and risk assessment initiatives with visibility to senior leadership, while coordinating with committees to ensure