Senior Information Security Officer

Datasnipper; Netherlands; Presencial; EUR 100.000 - 140.000; Jornada completa

Descripción de la vacante

DataSnipper in the Netherlands seeks a Senior Information Security Officer to own security controls, policies and risk activities. You will manage SOC 2 and ISO 27001 audits end-to-end, ensure regulatory compliance, and liaison with auditors.

You will lead security trainings, respond to incidents, and collaborate with engineering and product teams to strengthen secure development across the organization.

Formación

• 5–7 years in information security with ownership of compliance frameworks (SOC 2, ISO 27001) and audits.
• Ability to test, evidence and validate control effectiveness.
• Hands-on vendor risk assessments and due diligence.

Responsabilidades

• Be the SME and primary contact for security controls within DataSnipper.
• Manage and update internal security policies and risk activities.
• Lead SOC 2 and ISO 27001 audits end-to-end, including evidence collection and auditor liaison.
• Lead employee training and security awareness initiatives.
• Monitor and respond to security incidents with timely resolution and reporting.
• Partner with engineering and product teams to improve secure development processes.

Conocimientos

Information security

SOC 2

ISO 27001

GDPR

IAM

Cloud security

Secure development

Vendor risk

COBIT

Azure security

Herramientas

Vanta

Descripción del empleo

• As the Senior Information Security Officer, you will be the subject matter expert and contact point for security controls within DataSnipper
• You will manage and update internal security policies, operate the internal security risk activities and run SOC 2 and other audit activities
• You protect DataSnipper’s information systems, product and customer data from security threats while ensuring resilience and availability of our IT infrastructure
• Define and implement relevant information security policies
• Lead risk assessment and internal security control efforts, including planning, tracking and monitoring remediation actions
• Maintain compliance with SOC 2, ISO 27001, GDPR and other relevant frameworks; manage the annual SOC 2 audit end-to-end, including evidence collection and auditor liaison
• Lead employee training and awareness initiatives
• Be the subject matter expert for client security questions and concerns
• Monitor and respond to security incidents, ensuring timely resolution and reporting
• Be the expert in one or more areas of information security to identify, prevent and respond to risks and incidents
• Partner with engineering and product teams to improve secure development processes

• 5–7 years in information security, with demonstrated ownership of compliance frameworks (SOC 2, ISO 27001) and their audits
• Ability to test, evidence and validate operating effectiveness of controls
• Hands‑on vendor risk assessments and third‑party due diligence
• Leadership, communication and problem‑solving; influences stakeholders at all levels
• Working knowledge across IAM, network and cloud security, secure development
• Working experience across InfoSec, data privacy and compliance frameworks (SOC reports, ISO 27000 series, COBIT), plus IT and cloud security audits
• Proactive, self‑directed, track record of tangible results
• Certifications: CISSP, CISM, CISA, CCSP, Azure security
• Experience with Vanta
• Experience with EU security regulation (EU AI Act, Cybersecurity Act, etc.)
• Security operations or product security project experience