Senior Information Security & Compliance Lead

Kiteworks; Amsterdam; Hybrid; EUR 110,000 - 140,000; Full time

Benefits offered by this job

Stock options

Unlimited PTO (~35 days/year)

Pension plan

Job summary

Kiteworks is seeking a Senior Information Security Officer to lead audits, risk analyses, and security-improvement initiatives within a global security and compliance team. The role collaborates across IT, development, and customer-facing teams, shaping security practices as the company expands into new jurisdictions.

Hybrid role with three days in our Amsterdam office; the candidate will champion security across data, access, and supplier management while leveraging AI to automate recurring

Qualifications

• 5+ years in information security and compliance.
• Experience with ISO 27001 and ISMS.
• Experience with BSI C5 or SOC 2.
• Experience with audits and risk analyses.
• Identity and access management experience.
• Knowledge of GDPR and privacy legislation.

Responsibilities

• Own external security audits (ISO 27001, BSI C5, SOC 2).
• Perform gap analyses and implement new security frameworks.
• Maintain information security procedures across departments.
• Act as domain owner for IAM and supplier management.
• Execute control tasks (access checks, supplier reviews, internal audits).
• Collaborate with IT and development teams on security improvement projects.
• Respond to security incidents and questions from customers and prospects.

Skills

Information security

Compliance

Audit experience

Risk analysis

Identity and access management

AI affinity

Independent work

Pragmatic problem-solving

Tools

ISO 27001

SOC 2

BSI C5

Job description

Kiteworks is seeking a Senior Information Security Officer to lead audits, risk analyses, and security-improvement initiatives within a global security and compliance team. The role collaborates across IT, development, and customer-facing teams, shaping security practices as the company expands into new jurisdictions.

Hybrid role with three days in our Amsterdam office; the candidate will champion security across data, access, and supplier management while leveraging AI to automate recurring