Compliance & Security Officer | Yuma

Yuma; Yuma (AZ); On-site; USD 79,000 - 112,000; Full time

Benefits offered by this job

Mobility plan or lease car

High-end laptop

Internal training & certification"

Support for certifications

Speaking at meetups or conferences

Job summary

Yuma is seeking a Compliance & Security Officer to own our management systems and regulatory posture. You will safeguard ISO 9001, 14001, 27001 and NEN 7510, stay ahead of NIS2, DORA, GDPR, and prepare for the EU AI Act and EU Data Act. You’ll work closely with engineers, HR and management.

You translate frameworks into policies, drive audits, and advise on risk with practical controls that teams actually use. A strong team player with hands-on security and compliance expertise is essential.

Qualifications

• 3–5 years of experience in compliance, information security or risk.
• Ability to translate frameworks into policies, processes and controls.
• Strong IT infra, cloud and managed service affinity.
• Ability to explain regulation to management and engineers.
• Hands-on with ISO 9001/27001 and preferably NEN 7510.

Responsibilities

• Own and maintain our management systems (GMS/ISMS) under ISO 9001, 27001 & NEN 7510.
• Lead certification and surveillance audits for ISO 27001, NEN 7510, ISO 9001 & ISO 14001.
• Advance NIS2, DORA readiness and GDPR obligations; monitor reporting.
• Translate regulation into practical policies and controls; ensure audit readiness.
• Advise management on risks and oversee evidence during client/auditor inquiries.

Skills

Compliance

Information security

Risk management

IT infrastructure

Cloud

Structured working

Policy writing

Proactive

Team player

Communication skills

Dutch & English

Education

HBO degree

ISO 27001 Lead Implementer

ISO 27001 Lead Auditor

CIPP/E

CISM

CISSP

Tools

ISO 9001

ISO 14001

NEN 7510

GDPR

Job description

Compliance is not paperwork. It’s trust, made visible.

Most companies use AI to move faster.
We believe speed without guidance changes nothing.

We design collaborative AI that strengthens human judgment instead of replacing it.

By connecting powerful technology to human potential, we ensure people don’t lose control but regain it.

Our clients don't just execute faster. They adapt in real time. They make better decisions. And they build resilience into the core of their organizations. Organizations that thrive because they change.

We are Yuma, one of the fastest-growing digital transformation groups in the Benelux. We were built differently. Bringing together leading expertise in AI, data, technology and creativity to help organizations solve complex challenges and move forward with confidence.

To keep us audit-ready and make compliance simply part of how we work, we're looking for a Compliance & Security Officer.

What you’ll do

Yuma is on a growth journey. With ambitious plans to further strengthen our position in Mission Critical IT — and a regulatory landscape that tightens by the quarter — we’re looking for a Compliance & Security Officer who brings structure, keeps us audit-ready, and makes compliance something our teams use.

In this role, you are responsible for our own management systems and regulatory posture. You safeguard our ISO 9001, 14001, 27001 and NEN 7510 certifications, keep us on track for NIS2, DORA and GDPR, and prepare us for what’s coming with the EU AI Act and the EU Data Act. You work close to the business: with engineers, service delivery, HR and the management team.

You are the go-to person for compliance and security within Yuma. You translate frameworks and regulations into policies, processes and controls that fit how we work, and you keep them alive through audits, reporting and awareness. You advise the management team on risk, and you make sure evidence is there when a client, auditor or regulator asks. Besides that, you’ll

Own our management systems

• Own and maintain our GMS and ISMS: policies, risk register, controls and internal audits under ISO 9001, 27001 and NEN 7510
• Manage certification and surveillance audits for ISO 27001, NEN 7510, ISO 9001 and ISO 14001, from preparation to closing findings

Stay ahead of regulation

• Drive our NIS2 and DORA readiness and keep our reporting and register obligations in order
• Safeguard GDPR compliance: processing register, DPIAs, data subject requests and processor agreements
• Strengthen Yuma to be compliant with the EU AI Act and EU Data Act, and translate what they mean for our services and our clients

Keep the organisation secure

• Act as the link to security operations on incidents, vulnerabilities and follow-up actions
• Run supplier and vendor security assessments, and support security questions in client tenders
• Build cyber awareness across the organisation through training, simulations and clear communication
• Report on compliance status, risks and improvement plans to the management team

You have three to five years of experience in compliance, information security or risk, and you’ve seen a certification audit from the inside. You combine structure with pragmatism: you know the standards, but you’d rather have a control that people follow than a policy nobody reads. You’re comfortable explaining a regulation to the management team in the morning and discussing findings with an engineer in the afternoon.

Affinity with IT infrastructure, cloud and managed services

Strong analytical skills and a structured way of working, while keeping the big picture in view

Able to write a policy that is clear to a non-specialist

Certification such as ISO 27001 Lead Implementer or Lead Auditor, CIPP/E, CISM or CISSP is a plus

Proactive, independent and comfortable holding people to agreements

Team player who can motivate, inspire and handle resistance

Additionally, you bring:

• HBO work and thinking level
• Excellent communication skills in Dutch and English, politically aware and analytical
• At least 3 years of experience in a similar role
• Hands-on experience with ISO 9001 and 27001 and preferably NEN 7510
• Working knowledge of NIS2, DORA and GDPR; interest in EU AI Act and EU Data Act.

Why Yuma?

At Yuma, you’re given space. Space to grow, to shape your own path, and to build a compliance function the way you think it should work. We have a strong focus on knowledge sharing, and you’ll work with colleagues known for their craftsmanship across Cloud, Managed Services, Data & AI, Security and Infrastructure.

A compliance function you build, not one you inherit

Direct access to the management team and a mandate across the organisation

Internal training, knowledge sessions and active knowledge sharing

Support in obtaining the certifications that matter for your career

Speaking at meetups or conferences? Go for it.

What you’ll get from us

A great team where you’re given the freedom to innovate. You’ll also collaborate with and gain insight into highly professional and impactful organizations. Yuma builds sustainable partnerships: with clients and with you.

You can also expect:

• Mobility plan or lease car
• High-end laptop.

About Yuma

Yuma is an end-to-end digital transformation group in the Benelux. AI, data, and software development are key drivers of change, but we believe there is no digital transformation without human transformation. That’s why we combine a people-centric mindset with a hands-on approach and best-in-class expertise.

Our teams build smart, responsible solutions that solve real-world challenges and create meaningful impact: for organizations and the people behind them. Security and compliance are part of that from the first design decision onwards, which is exactly why this role matters.