Senior Information Security Officer

DataSnipper; Amsterdam; Hybrid; EUR 100,000 - 140,000; Full time

Benefits offered by this job

Equity

Pension plan

28 vacation days

Hybrid work

Daily lunches

NS business card

Onboarding programme

Continuous learning

Global team

Company events

Mental health platform

Job summary

DataSnipper is seeking a Senior Information Security Officer to own security controls, manage policies and risk activities, and oversee SOC 2 and ISO 27001 audits across the organization. You will protect data and ensure resilience of IT infrastructure while partnering with engineering and product teams to embed secure development.

The role requires 5–7 years in information security, with demonstrated audit ownership, and experience across IAM, cloud security and regulatory frameworks.

Qualifications

• 5–7 years in information security with ownership of compliance frameworks (SOC 2, ISO 27001).
• Experience across InfoSec, data privacy and compliance frameworks (SOC reports, ISO 27000, COBIT).
• Knowledge of IAM, network and cloud security; secure development practices.
• Hands-on vendor risk assessments and third-party due diligence.
• Ability to test, evidence and validate operating effectiveness of controls.
• Proactive, self-directed with a track record of tangible results.
• Leadership, communication and problem-solving; influences stakeholders at all levels.

Responsibilities

• Define and implement information security policies.
• Lead risk assessment and remediation tracking.
• Maintain compliance with SOC 2, ISO 27001, GDPR; manage audits end-to-end.
• Lead employee training and awareness initiatives.
• Be the SME for client security inquiries and concerns.
• Monitor and respond to security incidents with timely reporting.
• Partner with engineering/product to improve secure development processes.

Skills

Information security

SOC 2

ISO 27001

Cloud security

IAM

Vendor risk

Audit coordination

Leadership

Communication

Education

CISSP

CISM

CISA

CCSP

Azure security

Tools

Vanta

Job description

About the role

As the Senior Information Security Officer, you will be the subject matter expert and contact point for security controls within DataSnipper. You will manage and update internal security policies, operate the internal security risk activities and run SOC 2 and other audit activities. You protect DataSnipper's information systems, product and customer data from security threats while ensuring resilience and availability of our IT infrastructure.

About DataSnipper

Audit and finance are still massively manual and we are changing that. DataSnipper is a $1B, bootstrapped unicorn with 600,000+ users across 180+ countries, already embedded in the daily workflows of top audit and accounting firms.

Now, we are taking things further with our Excel Agent, bringing AI directly into where the work actually happens. Unlike generic AI tools, we do not sit on the sidelines. Our AI operates inside Excel, with access to real documents and audit evidence, meaning it does not just generate answers, it does the work, with full traceability.

We are not just applying AI, we are redefining how audit gets done. If you want to build something category-defining at scale, this is the place.

What You Will Do

• Define and implement relevant information security policies

• Lead risk assessment and internal security control efforts, including planning, tracking and monitoring remediation actions

• Maintain compliance with SOC 2, ISO 27001, GDPR and other relevant frameworks; manage the annual SOC 2 audit end-to-end, including evidence collection and auditor liaison

• Lead employee training and awareness initiatives

• Be the subject matter expert for client security questions and concerns

• Monitor and respond to security incidents, ensuring timely resolution and reporting

• Be the expert in one or more areas of information security to identify, prevent and respond to risks and incidents

• Partner with engineering and product teams to improve secure development processes

What You Bring

• 5–7 years in information security, with demonstrated ownership of compliance frameworks (SOC 2, ISO 27001) and their audits

• Working experience across InfoSec, data privacy and compliance frameworks (SOC reports, ISO 27000 series, COBIT), plus IT and cloud security audits

• Working knowledge across IAM, network and cloud security, secure development

• Hands-on vendor risk assessments and third-party due diligence

• Ability to test, evidence and validate operating effectiveness of controls

• Proactive, self-directed, track record of tangible results

• Leadership, communication and problem-solving; influences stakeholders at all levels

Nice to have

• Security operations or product security project experience

• Experience with EU security regulation (EU AI Act, Cybersecurity Act, etc.)

• Certifications: CISSP, CISM, CISA, CCSP, Azure security

• Experience with Vanta

What We Offer

• Be part of one of the fastest-growing, profitable unicorn scale-ups in the Netherlands with a global impact.

• Equity (Stock Appreciation Rights) to share in the company’s success and growth.

• Pension plan with a 6% contribution on top of your base salary.

• 28 vacation days per year (full-time) to support your work-life balance.

• Hybrid work model with at least 3 days onsite in our dynamic Amsterdam office.

• Daily, freshly prepared lunches by our in-house chef to keep you energised.

• NS business card for easy commuting to the office.

• A structured onboarding programme designed to set you up for success, including dedicated time to learn our product and customers before you hit the ground running.

• Access to continuous learning and development initiatives to grow your skills.

• Engage with a vibrant international team spread across seven global offices.

• Company-wide events like DataSnipper GO, where global teams come together.

• Access to OpenUp, a mental health and wellness platform supporting your wellbeing.

Recruitment Process

1. Recruiter Screen (30 minutes, online)

2. Hiring Manager Interview (30 minutes, online)

3. Assessment Interview (1 hour, on-site)

4. Final Interview (30 minutes, online)

At DataSnipper, we believe great ideas come from different perspectives, experiences, and backgrounds. We are committed to building an inclusive workplace and providing every candidate with a fair and equitable hiring experience.
Our hiring decisions are merit based and grounded in the skills, experience, potential, and capabilities relevant to the role.
We welcome applicants regardless of age, race, ethnicity, nationality, gender, gender identity or expression, sexual orientation, religion, disability, or any other characteristic that makes you, you.
What matters to us is what you can bring to the role, the team, and DataSnipper.