Security Governance & Risk Lead - ISO 27001, AI

PwC South Africa; Amsterdam; Hybrid; Confidential; Full time

Benefits offered by this job

Competitive salary

Annual bonus

Permanent contract

Training programs

Mobility benefits

32 vacation days

Well-being budget

OpenUp access

Hybrid work arrangement

Job summary

PwC Netherlands is seeking a proactive security governance leader to own the CISO office's internal control, audit readiness, and regulatory programs. You’ll implement frameworks like ISO 27001, SOC 2, NIS2, and DORA, shaping AI governance and leading annual security risk assessments across PwC NL.

You’ll work with auditors, business, and tech teams to embed security into day‑to‑day operations, report to senior stakeholders, and drive continuous control improvements in a hybrid work environment.

Qualifications

• 5+ years of professional experience in information security, IT governance, compliance, risk management, and internal control.
• Hands-on experience implementing and maintaining ISO 27001, SOC 2, and NIS2.
• Solid understanding of internal audit processes, control testing, issue remediation, and how to build evidence that meets regulator and auditor standards.
• Knowledge of AI governance, AI risk, and emerging technology controls, plus previous hands-on IT or cybersecurity experience as a strong advantage.
• Fluent in Dutch at a professional level.

Responsibilities

• Lead the CISO office's work on the internal PwC control framework and act as SME for internal audit, including preparation, evidence testing, remediation tracking, and control maturity improvement.
• Drive the implementation, upkeep, and continuous improvement of ISO 27001, SOC 2, NIS2, and DORA, and manage the CISO office pillar of PwC NL's internal IT Unified Control Framework.
• Lead the global and local annual security risk assessment and manage PwC NL's security awareness campaigns.
• Implement and maintain the firm's approach to AI governance and risk management, including policy development, risk assessment, control definition, and oversight of responsible use.
• Partner with internal committees and lines of service to ensure security, risk, and control requirements are understood, workable, and embedded across the business.

Skills

information security

IT governance

compliance

risk management

internal control

ISO 27001

SOC 2

NIS2

DORA

AI governance

audit readiness

Job description

PwC Netherlands is seeking a proactive security governance leader to own the CISO office's internal control, audit readiness, and regulatory programs. You’ll implement frameworks like ISO 27001, SOC 2, NIS2, and DORA, shaping AI governance and leading annual security risk assessments across PwC NL.

You’ll work with auditors, business, and tech teams to embed security into day‑to‑day operations, report to senior stakeholders, and drive continuous control improvements in a hybrid work environment.