Security Leader, Hands-on & ISO 27001 Champion (Hybrid)

F2F.com; Amsterdam; Hybrid; EUR 67,000 - 106,000; Full time

Benefits offered by this job

Competitive salary

24 vacation days

Fully paid pension plan

Free lunch at the office

NS Business Card

Hybrid working

€1,000 personal development budget

Gym subscription via ClassPass

Lease-a-bike scheme

Salary between €6000 - €9500

Job summary

F2F.com seeks a Head of Information Security to own security direction across the company. You will review code with engineers, lead ISO 27001 efforts and build practical, scalable security controls that fit a growing platform.

You will collaborate with support, safety and leadership to raise security awareness, manage risk, and drive secure development with CI/CD, IAM, and vendor assessments. Fluency in English and Dutch is a plus.

Qualifications

• 5+ years of practical experience in software development or security engineering.
• Proven ability to drive organisational change and implement security measures that people actually adopt.
• Expertise in Python, Node.js and API security.
• Experience running ISMS (ISO 27001) or alignment to NIST CSF.

Responsibilities

• Develop, implement and maintain practical information security policies aligned with business goals, without bureaucracy.
• Review code with engineers and design secure services, APIs and data interactions.
• Oversee risk assessments, vendor security evaluations and data flow tracking.
• Prepare and guide ISO 27001 certification, building a scalable ISMS.

Skills

Security leadership

Security engineering

Python

Node.js

API security

CI/CD

AWS

ISMS / ISO 27001

Tools

SAST

DAST

SCA

IAM

CI/CD tooling

Job description

F2F.com seeks a Head of Information Security to own security direction across the company. You will review code with engineers, lead ISO 27001 efforts and build practical, scalable security controls that fit a growing platform.

You will collaborate with support, safety and leadership to raise security awareness, manage risk, and drive secure development with CI/CD, IAM, and vendor assessments. Fluency in English and Dutch is a plus.