Senior Information Technology Security Officer

Doghouse Recruitment; Utrecht; On-site; EUR 90,000 - 95,000; Full time

Job summary

Doghouse Recruitment is seeking an Information Security Officer for a fast-growing Dutch SaaS scale-up in real estate. You will own the security programme, maintain ISO 27001, and coordinate ISAE 3402 audits while aligning acquired firms with standards.

The role involves AI governance and GDPR oversight within a B2B software environment. You will work closely with external security partners and manage access via Entra ID, Defender for Cloud, and Sentinel.

Qualifications

• 4–5+ years in a similar security role.
• Proven ISO 27001 and ISAE 3402 experience.
• Hands-on Azure security knowledge and AI tooling.
• GDPR experience in B2B software.

Responsibilities

• Maintain ISO 27001, manage the ISMS, and coordinate ISAE 3402 audits.
• Bring acquired companies in line with existing certifications.
• AI governance: manage AI register and assess tools per EU acts.
• Assess new tech against policy; monitor GDPR compliance.
• First point of contact for incidents; manage access in Entra ID.
• Run security and AI awareness training.

Skills

Excellent communication

Analytical skills

Proactive approach

Education

CISSP

CISM

ISO 27001 Lead Implementer

ISAE 3402

Tools

Entra ID

Defender for Cloud

Sentinel

Azure security

Job description

Ready to own the security programme of a fast-growing SaaS scale-up as its in-house Security Officer?

Our client is a fast-growing Dutch SaaS company in the real estate sector, running fully on Microsoft Azure and growing through a buy-and-build strategy in the Netherlands and the DACH region. It is ISO 27001 certified, holds an ISAE 3402 Type II assurance report and uses AI in its own product. As Information Security Officer, you are the link between policy and practice and the internal go-to person for information security, working closely with the external security partners (MDR/SOC and cloud management).

Your responsibilities:

• Maintaining the ISO 27001 certification, managing the ISMS and coordinating the ISAE 3402 Type II audit
• Bringing acquired companies in line with the existing certifications
• AI governance: managing the AI register and assessing new AI tools (EU AI Act)
• Assessing new technologies and tools against policy; monitoring GDPR compliance
• First point of contact for incidents; access management in Entra ID
• Running security and AI awareness training

Your profile:

• 4 to 5+ years of experience in a similar security role
• Proven knowledge of ISO 27001 and ISAE 3402
• Hands-on knowledge of Azure security (Entra ID, Defender for Cloud, Sentinel), using AI to analyse data
• Experience with GDPR in a B2B software environment
• Proactive, self-managing and focused on reducing risk
• Excellent communication and analytical skills
• Based in the Netherlands; Dutch-speaking is a strong preference
• CISSP, CISM or ISO 27001 Lead Implementer and knowledge of the EU AI Act are a plus
• 40 hours per week, at least 2 days in the office in the Utrecht region
• Salary between €90K and €95K gross per year, depending on experience;
• one-year contract with the intention of a permanent contract

Interview process: a cultural fit interview, followed by a technical interview