Technical Information Security Officer

Qabird; Delft; On-site; EUR 70,000 - 100,000; Full time

Benefits offered by this job

Profit sharing

Flexible hours

Vacation add-on

Snacks & coffee

In-house gym

Job summary

Prime Vision is seeking a Technical Information Security Officer to bridge governance and technical security, translating requirements into practical measures. You will work with IT, product development, sales and project teams to embed security across products and processes.

You bring 5–7 years of information security experience, strong knowledge of ISO 27001/ISAE 3402/GDPR, and fluency in Dutch and English.

Qualifications

• Experienced information security professional bridging governance and technical security.
• Extensive experience maintaining ISMS and managing internal/external audits.
• Strong knowledge of ISO 27001, ISAE 3402, GDPR and related requirements.
• Comfortable discussing security across networks, cloud, and applications.

Responsibilities

• Develop, implement and maintain information security policies, standards and guidelines.
• Maintain and improve the Information Security Management System and audit readiness.
• Collaborate with sales, project and technical teams on security requirements.
• Perform risk analyses, supplier assessments and security reviews.
• Monitor regulations and translate requirements into practical policies and controls.
• Lead security awareness initiatives and coordinate incident response.

Skills

Information security

Governance

Risk assessment

Audits

Security architecture

Network security

Vulnerability management

GDPR

Dutch & English fluency

Education

Bachelor’s or Master’s degree in computer science / information technology / cybersecurity / business administration

Job description

Are you passionate about information security and technology? Do you enjoy working with both technical and non-technical teams to make security practical, effective and part of the way people work? Then this role could be a great opportunity for you.

Description

As Technical Information Security Officer, you act as a trusted advisor and bridge the gap between security governance and technical implementation. You work closely with IT, product development, sales and project teams to translate security requirements into clear workable measures.

You play a leading role in maintaining and improving our Information Security Management System, strengthening audit readiness. supporting compliance with relevant regulations, and helping ensure that security is embedded into our products, services and internal processes, especially as we increasingly embed AI into our solutions.

The role combines policy, risk management and technical security expertise. You perform risk analyses and supplier assessments, manage the audit and security awareness program and lead improvement activities. You contribute to topics such as security architecture, network security, vulnerability management, secure software development, AI-related security risks considering regulations such as the Cyber Resilience Act and the EU AI Act.

You bring broad technical understanding and are comfortable discussing security architecture, networks, infrastructure, applications and cloud environments with specialists. You are able to ask the right questions, review technical designs from a security and risk perspective, and explain why security measures matter.

You are proactive, analytical and pragmatic. You take ownership, work independently and enjoy turning requirements into practical improvements that help teams work securely and efficiently.

You will be part of the Security Team and will have plenty of opportunity to share your ideas, improve our security approach and make a visible impact across Prime Vision.

The job

• Develop, implement and maintain information security policies, standards and guidelines to protect company and customer information.
• Maintain and improve the Information Security Management System and support continuous improvement of security processes.
• Manage and participate in internal and external audits, including certifications and assurance frameworks such as ISO 27001, ISAE 3402 and IRAP.
• Collaborate with sales, project and technical teams on security requirements for proposals, customer projects and product development.
• Conduct supplier assessments, application risk analyses and security reviews for new tooling and services.
• Monitor relevant security and privacy regulations and translate requirements into practical policies, action plans and controls.
• Work with development teams to support secure development practices, vulnerability management and responsible use of AI technologies.
• Perform risk assessments, maintain the risk register and follow up on risk treatment plans.
• Support and coordinate security incident response activities.
• Identify opportunities to optimize, automate and evidence security controls.
• Lead security awareness initiatives to strengthen security culture across Prime Vision.

What we offer

We offer a full-time position in an informal and professional working environment with a lot of room for personal development and many extras:

• An open and inclusive workspace with colleagues from more than 20 different nationalities.
• A globally oriented company with an equally global client base.
• A full range of digital tools will be at your disposal, such as a laptop and a smartphone of choice.
• A competitive salary.
• The possibility to work flexible hours.
• A profit-sharing scheme for all employees.
• The option to purchase additional vacation days on top of the 25 standard holiday allowance.
• Extra perks: a wide range of snacks and excellent coffee in our cozy Grand Café, options for chair massage, hairdresser, and training sessions by a personal trainer in our in-house gym.

Your profile

You are an experienced information security professional who is comfortable operating at the intersection of governance, compliance and technical security. You can lead discussions with auditors, management and technical specialists, and you know how to translate complex requirements into clear, risk-based and practical security measures.

You bring

• A bachelor’s or master’s degree in computer science, information technology, cybersecurity, business administration or a related field.
• 5 – 7 years of relevant experience in an information security role with both technical and governance aspects.
• Demonstrable experience maintaining and improving an Information Security Management System and managing internal and external audits.
• Strong working knowledge of frameworks, standards and regulations such as ISO 27001, ISAE 3402, GDPR and other relevant security or assurance requirements.
• Solid understanding of security architecture, network security, identity and access management, vulnerability management and secure software development practices.
• Experience reviewing technical designs, network setups, infrastructure security measures or application architectures from a security and risk perspective.
• Experience performing risk assessments, defining mitigating controls and following up on risk treatment plans with business and technical stakeholders.
• The ability to challenge constructively, ask the right technical questions and explain security decisions clearly to different audiences.
• Strong analytical skills, a critical mindset and the ability to stay pragmatic, solution-oriented and focused on continuous improvement.
• Fluency in Dutch and English.

Nice to have

• Certifications such as CISM, CISSP, CRISC, ISO 27001 Lead Implementer or ISO 27001 Lead Auditor.
• Experience with security architecture reviews, network segmentation, cloud security, zero trust principles or secure-by-design product development.
• Experience with security requirements in customer projects, software products, AI-related initiatives or regulated environments.
• Knowledge of regulations such as the Cyber Resilience Act, NIS2 or the EU AI Act.

The application process will consist of 2 interviews and a Big Five personality test. We look forward to hearing from you.