Senior Information Security Officer — Secure SaaS, 4-Day Week

Nmbrs; Amsterdam; Hybrid; EUR 64,000 - 78,000; Full time

Benefits offered by this job

4-day workweek

Pension plan with 15% contribution

Personal coach

Training and development budget

Hybrid working

Exchange to international office up to

Visma opportunities

Job summary

Nmbrs in Amsterdam is seeking a Senior Information Security Officer to own ISMS, protect data, and drive security posture end-to-end across the Nmbrs suite. You will work closely with the DPO, conduct risk assessments, and manage incident response, vulnerability management, and compliance with security regulations.

You will shape security architecture, oversee audits, and mentor teams on secure development practices while maintaining a security-aware culture across the organization.

Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, or a related field.
• Security credential such as ISO 27001 Lead Implementer/Auditor, CISSP, or CISM - or a clear willingness to obtain one.
• Broad experience across the security spectrum: technical (cloud, network, systems) as well as governance, risk, audits and compliance.
• Comfortable working hands-on with firewalls, cloud environments and system/audit logs when needed.
• The ability to explain technical risk clearly to non-technical colleagues and leadership.
• Experience working in a SaaS environment.

Responsibilities

• Own the ISMS, keep the ISO 27001 certification and ISAE3402 audit current, ensure compliance with the Visma Security Program and track regulatory drivers such as NIS2 and GDPR that affect Nmbrs' security posture.
• Develop and maintain security policies and standards, run risk assessments, and verify that control measures are actually effective in practice.
• Help shape our security architecture and access management approach, and make sure security is considered early in how squads build and ship software.
• Plan audits, coordinate evidence collection, act as the main contact for auditors, and follow up on findings until closure.
• Stay hands-on with firewalls, cloud security and system logs, and drive vulnerability management with the squads.
• Investigate and mitigate security incidents and data breaches, and turn lessons learned into concrete improvements.
• Set clear guidelines for safe computer, network and AI use, build a security-aware culture across the organization, from phishing to onboarding/offboarding processes, and be the go-to person for security questions.
• Assess the security of vendors and new tools before onboarding, and answer customer security questionnaires.
• Translate technical risks and threat trends into language non-technical colleagues and the leadership team can act on.

Skills

ISO27001

CISSP/CISM

Cloud security

SaaS experience

Governance & audits

Education

Bachelor's degree in Computer Science, Cybersecurity, or related field

Tools

Firewall management

Job description

Nmbrs in Amsterdam is seeking a Senior Information Security Officer to own ISMS, protect data, and drive security posture end-to-end across the Nmbrs suite. You will work closely with the DPO, conduct risk assessments, and manage incident response, vulnerability management, and compliance with security regulations.

You will shape security architecture, oversee audits, and mentor teams on secure development practices while maintaining a security-aware culture across the organization.