Technical Information Security Officer (ISO)

eye-security; Netherlands; On-site; EUR 90,000 - 140,000; Full time

Job summary

Eye Security, a Netherlands-based cybersecurity company, is seeking a Technical Information Security Officer to lead IT security architecture, monitoring infrastructure, and technical controls. You will translate compliance requirements from the CISO office into robust technical solutions, design and deploy security components, and manage log analytics to ensure controls work in real time.

This senior role offers strategic influence over Eye Security's security posture, collaborating with the

Qualifications

• Hands-on experience with AWS, DLP, log analytics, SIEM and secure config Mgmt.
• Deep knowledge of RBAC and separation of duties in enterprise IT.
• Expertise in ISO 27001:2022 and EU NIS2 compliance.
• Excellent analytical and problem-solving skills to translate compliance into technical solutions.

Responsibilities

• Design and implement insider threat solutions keeping data safe.
• Define and enforce RBAC and separation of duties across systems.
• Maintain secure configurations aligned with ISO 27001:2022.
• Develop threat models and security design docs.
• Deploy centralized logging and SIEM to analyze events.
• Coordinate with CISO, support audits for ISO 27001:2022 and EU NIS2.

Skills

AWS security

DLP

RBAC

ISO 27001

Threat modeling

Incident response

Log analytics

Security monitoring

Tools

AWS

SIEM

Configuration management tools

Job description

About Eye Security

Eye Security provides cybersecurity with embedded cyber insurance solutions for organizations across Europe. Headquartered in the Netherlands, we are already over 190 FTEs and continue to grow internationally, having secured our Series C funding of 60 million euros. We combine cutting-edge technology with hands-on expertise to detect, respond to, and recover from cyber threats in real time. Our team brings together talent from intelligence, military, tech, and consulting backgrounds, all united by a shared mission: to make enterprise-grade cybersecurity accessible to every business, particularly SMEs, not just the big players. At Eye, you will work on projects with an international footprint, helping ourselves to meet ISO 27001:2022 and EU NIS2 obligations while building a safer digital future.

About this role

We are looking for a Technical Information Security Officer to lead the design and implementation of our IT security architecture, monitoring infrastructure, and technical controls. In this role, you will translate compliance requirements from our CISO office into robust technical solutions, design and deploy security architecture components, manage our log analytics and monitoring platform, and ensure all security controls are functioning as intended. You act as the technical counterpart to our compliance-fac‑ing ISO. Where the CISO office defines what controls need to prove compliance, you design and implement how those controls work and ensure they remain operational and effective. This is a senior technical cybersecurity role with strategic influence over Eye Security's security posture.

What you will do

Security Architecture

• Design and implement insider threat solutions, such as Data Loss Prevention (DLP), to safeguard sensitive information and prevent unauthorized data exfiltration.
• Define and enforce role-based access controls and separation of duties principles to prevent abuse and limit the effect of mistakes across systems and applications.
• Establish and maintain secure configurations for systems, applications, and network components in alignment with industry standards and ISO 27001:2022 requirements.
• Develop threat models and security design documentation to anticipate and mitigate emerging attack vectors.

Log Analytics & Systems Monitoring

• Deploy and configure centralized logging infrastructure and SIEM platforms to collect, store, and analyze security events across all systems and applications.
• Design and implement alerting rules and monitoring workflows to detect anomalies, suspicious activities, and potential security breaches in real time.
• Monitor, investigate, and respond to security alerts in coordination with the CISO office and provide recommendations for remediation.
• Optimize log retention, storage, and analytics performance to maintain compliance with regulatory and operational requirements.

Vulnerability & Risk Management

• Coordinate vulnerability disclosure processes and manage the bug bounty program to identify and remediate security weaknesses in a timely manner.
• Coordinate and oversee penetration testing engagements to validate security controls and identify gaps in the security architecture.
• Develop and maintain a process for tracking, prioritizing, and remediating identified vulnerabilities and security findings.

Secure Development & Configuration Management

• Establish and enforce secure coding principles and practices for all internal software development and third-party components.
• Implement configuration management processes to ensure systems are deployed and maintained in a secure, consistent, and auditable manner.
• Design and implement secure data masking techniques to protect sensitive information in non-production environments and during data processing.

Compliance Support & Collaboration with CISO office

• Work closely with the Information Security Officers to translate compliance requirements into clear technical specifications for architecture, logging, and monitoring.
• Provide evidence and documentation of technical controls to support compliance audits and regulatory assessments for ISO 27001:2022 and EU NIS2.
• Support the ISO's in defining technical monitoring requirements and help validate that implemented controls meet compliance objectives.
• Develop and support cyber security incident exercises and participate in the Incident Response Team during security breaches.

What you will need

Must-haves

• Hands-on experience with AWS, DLP, log analytics, SIEM platforms, and secure configuration management in enterprise environments.
• Deep understanding of role-based access control (RBAC), separation of duties principles, and their implementation in modern IT infrastructures.
• Expertise in security frameworks and compliance standards, particularly ISO 27001:2022 and EU NIS2 requirements.
• Excellent analytical and problem-solving skills with the ability to translate compliance requirements into technical solut