Security Governance & Risk Leader (Hybrid)

PwC Nederland; Amsterdam; Hybrid; EUR 110,000 - 140,000; Full time

Benefits offered by this job

Competitive salary

Permanent contract

Training programs

Mobility options

Vacation days

Well-being budget

OpenUp access

Hybrid working

Job summary

PwC Netherlands is seeking a security governance leader to own internal control, audit readiness, and the implementation of ISO 27001, SOC 2, NIS2, and DORA across the firm. You will shape PwC NL's approach to AI governance and drive our annual security risk assessment with direct impact on how we manage risk.

Join a collaborative CISO office of ambitious professionals, translate global policy into practical standards, work with auditors, business stakeholders, and technology teams, and report

Qualifications

• 5+ years of experience in information security, governance, compliance, risk management, and internal control.
• Hands-on experience implementing ISO 27001, SOC 2, and NIS 2.
• Knowledge of AI governance and emerging technology controls.
• Fluent Dutch at a professional level.
• Strong audit and control testing experience.

Responsibilities

• Lead the CISO office's work on internal PwC control framework and SME for internal audit, including preparation, evidence testing, remediation tracking, and control maturity improvement.
• Drive implementation and improvement of ISO 27001, SOC 2, NIS2, and DORA, and manage the CISO office pillar of PwC NL's internal IT Unified Control Framework.
• Lead the annual security risk assessment and manage PwC NL's security awareness campaigns.
• Implement and maintain the firm's approach to AI governance and risk management, including policy development, risk assessment, control definition, and oversight of responsible use.
• Partner with internal committees and lines of service to ensure security, risk, and control requirements are understood and embedded across the business.

Skills

Information security

IT governance

Compliance

Risk management

Internal control

Dutch language

Job description

PwC Netherlands is seeking a security governance leader to own internal control, audit readiness, and the implementation of ISO 27001, SOC 2, NIS2, and DORA across the firm. You will shape PwC NL's approach to AI governance and drive our annual security risk assessment with direct impact on how we manage risk.

Join a collaborative CISO office of ambitious professionals, translate global policy into practical standards, work with auditors, business stakeholders, and technology teams, and report