Senior Information Technology Security Officer

Doghouse Recruitment; Netherlands; Hybrid; EUR 90.000 - 95.000; Vollzeit

Zusammenfassung

Doghouse Recruitment is representing a fast-growing Dutch SaaS scale-up seeking an Information Security Officer in the Utrecht area. The role focuses on maintaining ISO 27001, coordinating ISAE 3402 audits, and ensuring GDPR compliance while overseeing AI governance and incident response.

You will work hybrid with 2 days in the office, 40 hours a week, in a role based in the Netherlands, with a focus on reducing risk and aligning acquired companies with existing standards.

Qualifikationen

• 4 to 5+ years in a similar security role.
• Proven knowledge of ISO 27001 and ISAE 3402.
• Hands-on knowledge of Azure security (Entra ID, Defender for Cloud, Sentinel).
• Experience with GDPR in a B2B software environment.
• Dutch-speaking is preferred; based in the Netherlands.

Aufgaben

• Maintaining ISO 27001 certification and managing ISMS.
• Coordinating the ISAE 3402 Type II audit.
• Bringing acquired companies in line with certifications.
• AI governance: managing AI register and assessing tools (EU AI Act).
• Assessing new technologies against policy; monitoring GDPR compliance.
• First point of contact for incidents; access management with Entra ID.
• Running security and AI awareness training.

Kenntnisse

ISO 27001

ISAE 3402

Azure security

GDPR

AI governance

Tools

Entra ID

Defender for Cloud

Microsoft Sentinel

Jobbeschreibung

Ready to own the security programme of a fast-growing SaaS scale-up as its in-house Security Officer?

Our client is a fast-growing Dutch SaaS company in the real estate sector, running fully on Microsoft Azure and growing through a buy-and-build strategy in the Netherlands and the DACH region. It is ISO 27001 certified, holds an ISAE 3402 Type II assurance report and uses AI in its own product. As Information Security Officer, you are the link between policy and practice and the internal go-to person for information security, working closely with the external security partners (MDR/SOC and cloud management).

Your responsibilities:

• Maintaining the ISO 27001 certification, managing the ISMS and coordinating the ISAE 3402 Type II audit
• Bringing acquired companies in line with the existing certifications
• AI governance: managing the AI register and assessing new AI tools (EU AI Act)
• Assessing new technologies and tools against policy; monitoring GDPR compliance
• First point of contact for incidents; access management in Entra ID
• Running security and AI awareness training

Your profile:

• 4 to 5+ years of experience in a similar security role
• Proven knowledge of ISO 27001 and ISAE 3402
• Hands-on knowledge of Azure security (Entra ID, Defender for Cloud, Sentinel), using AI to analyse data
• Experience with GDPR in a B2B software environment
• Proactive, self-managing and focused on reducing risk
• Excellent communication and analytical skills
• Based in the Netherlands; Dutch-speaking is a strong preference
• CISSP, CISM or ISO 27001 Lead Implementer and knowledge of the EU AI Act are a plus
• 40 hours per week, at least 2 days in the office in the Utrecht region
• Salary between €90K and €95K gross per year, depending on experience;
• one-year contract with the intention of a permanent contract

Interview process: a cultural fit interview, followed by a technical interview