Security & Privacy Leader - Enterprise GRC & Resilience

Just Brands - Fashion & Retail; Lijnden; On-site; EUR 90,000 - 130,000; Full time

Benefits offered by this job

End-of-year bonus

Lunch provided

Gym access

Company parties

Staff discount

Job summary

Just Brands - Fashion & Retail seeks a Security & Privacy Officer (Information Security / GRC) to harden governance, risk and compliance across our enterprise. You translate security and privacy risks into business decisions, drive MT priorities, and embed resilience into daily operations and projects.

You’ll lead ISO 27001/NIST CSF programs, manage risk registers, and coordinate audits, while partnering with Legal and DPO.

Qualifications

• Bachelor’s degree in Information Security or related field.
• 5+ years in information security, IT governance or privacy roles.
• Experience implementing ISO 27001 and/or NIST CSF; GDPR/AVG.
• Experience with risk management, audits, and external parties.
• Ability to drive governance with limited resources.
• Familiarity with Microsoft 365, Okta, MFA and cloud services.
• Certifications such as CISSP, CISM or ISO 27001 Lead Implementer/Auditor are a plus.
• Retail/e-commerce or distributed environments experience is a plus.

Responsibilities

• Own and maintain security and privacy governance aligned with ISO 27001 and NIST CSF.
• Manage the cyber risk register, scoring, and MT-level risk reviews.
• Lead the BIA and translate into BC/DR requirements.
• Govern control effectiveness and drive corrective actions.
• Establish incident response and GDPR breach notification processes.
• Drive privacy governance: data classification and DPIAs.
• Run third-party/vendor risk management and contract security.
• Prepare for audits with evidence and regulatory interactions.
• Build awareness with HR/Marketing metrics.
• Report top risks and compliance status to MT.
• Collaborate with Privacy/legal on regulatory changes.

Skills

Risk management

Governance & compliance

ISO 27001 knowledge

NIST CSF familiarity

Privacy by design

Vendors & audits

Cloud identity (Okta/M365)

Certifications (CISSP/CISM)

Retail/e-commerce experience

Stakeholder communication

Education

Bachelor's degree in Information Security / IT / Business Administration

Job description

Just Brands - Fashion & Retail seeks a Security & Privacy Officer (Information Security / GRC) to harden governance, risk and compliance across our enterprise. You translate security and privacy risks into business decisions, drive MT priorities, and embed resilience into daily operations and projects.

You’ll lead ISO 27001/NIST CSF programs, manage risk registers, and coordinate audits, while partnering with Legal and DPO.