Senior Information Security & Risk Leader (Hybrid)

Act; Zaandam; Hybrid; EUR 90,000 - 130,000; Full time

Benefits offered by this job

Annual bonus

Permanent contract

Training & leadership programs

OV mobility options

32 vacation days

Well-being budget OpenUp

Hybrid work model

Home office setup

Internet expense allowance

Job summary

PwC NL is seeking a senior information security leader to join the CISO office and drive internal control, audit readiness, and compliance programs across the firm. You will implement ISO 27001, SOC 2, NIS2, and DORA while shaping AI governance and risk management strategies.

The role collaborates with auditors, business stakeholders, and technology teams to embed security across the organisation. You will report to senior stakeholders, manage ongoing control testing, evidence collection, and

Qualifications

• 5+ years of experience in information security, IT governance, compliance, risk management, and internal control.
• Hands-on experience implementing ISO 27001, SOC 2, and NIS2.
• Security project management experience is a strong plus.
• Solid understanding of internal audit processes, control testing, and evidence collection for regulators.

Responsibilities

• Join the CISO office and lead on internal security, risk, and control initiatives.
• Translate global policy into practical standards and ways of working for PwC NL.
• Embed security into day-to-day operations and drive resilience, regulatory readiness, and AI governance.

Skills

Information security

IT governance

Compliance

Risk management

Internal control

Tools

ISO 27001

SOC 2

NIS2

DORA

Job description

PwC NL is seeking a senior information security leader to join the CISO office and drive internal control, audit readiness, and compliance programs across the firm. You will implement ISO 27001, SOC 2, NIS2, and DORA while shaping AI governance and risk management strategies.

The role collaborates with auditors, business stakeholders, and technology teams to embed security across the organisation. You will report to senior stakeholders, manage ongoing control testing, evidence collection, and