Information Security Officer

Action; Netherlands (MO); Hybrid; USD 97,165 - 125,743; Part time

Benefits offered by this job

Market-based salary

Annual bonus

Flexible working hours (up to 40% from

Home

Job summary

Action is seeking an Information Security Officer to drive security across IT and business domains from our Netherlands base. The role emphasizes translating complex security concepts into actionable business objectives and coordinating with IT owners, executives and security teams to advance our security program.

You will contribute to market monitoring of threats, governance, and the Information Security Framework, while ensuring timely execution of security initiatives and risk responses

Qualifications

• Minimum college/university education in Information Technology or related field.
• Strong understanding of information security concepts and controls.
• Experience translating technical risk into business guidance.

Responsibilities

• Review market developments in information security and emerging threats.
• Discuss security implications with IT owners and project teams.
• Contribute to maturity of Information Security Framework (NIST CSF, ISO/IEC 27001/2).
• Collaborate with IT Security Operations and Risk & Privacy teams.
• Maintain alignment with security strategy, roadmap activities and governance.

Skills

Information security

Threat analysis

Stakeholder management

Communication

Team collaboration

Education

Bachelor's degree in IT or related field

Job description

Action is looking for an Information Security Officer

(Fulltime / Parttime, 32-38 uur per week)

Want to be part of a unique journey? Step aboard and be our new Information Security Officer. Action is the fastest growing non‑food retailer within Europe opening new stores on a daily basis. To secure this ambition, Action Technology is looking for an inspiring, passionate and adaptive Security mindset to join our Information Security Officers team in supporting and driving a positive security practice across the different IT and Business domains.

A Typical day in the life of an Action ISO

The morning starts by reviewing market developments regarding information security and potential threats for the organization. Emerging information security risks are brought to the attention of the respective (IT) owner including treatment advice and, if needed, timely follow‑up is tracked. Together with the IT team you discuss both operational and project, change or release activities to understand the potential impact for information security. You take proactive initiative where needed and stimulate local ownership to ensure security by design. Meanwhile you contribute to the improvement and maturity of the Information Security Framework based upon NIST CSF, its capabilities and competencies.

Periodic stakeholder management is required to validate alignment with the information security strategy, roadmap activities and ensure effective and timely implementation while balancing the organization’s absorption and adoption. You discuss technical details with the operational IT team while also organizing buy‑in from management teams and business domains.

Your team

The Information Security Officers are part of the Information Security team and report to the Manager Information Security. The core team consists of 4–5 persons, and you will work closely with colleagues from IT Security Operations and Risk & Privacy Management. You will report to Matt Stolwijk (Manager Information Security) and your position is located within the international headquarters in Zwaagdijk. The Technology department works with specialist teams for Enterprise Architecture, IT Project & Portfolio Management, Development & Operations and BizTech.

This is you

You have a background in the tech world and are able to translate technical and complex situations into business objectives. You are a team player with drive and excellent social skills and have a high level of pragmatism. You are organized, meet agreements within deadlines and according to guidelines. You work efficiently and effectively, even under time pressure and at a fast pace. You are goal‑oriented, take initiative and ownership.

• Completed a college or university education, preferably in Information Technology, computer science or another IT technical education
• Preferably with at least 8 years of relevant work experience in the field of Information Security
• You have been working in the Netherlands for at least 2 years and have affinity with Dutch culture and working methods
• CISSP and CISM certification is preferred
• Thorough understanding of and experience with internationally accepted frameworks and standards such as ISO27001/2, NIST Cyber Security Framework, CIS, etc
• Experience with Third Party (Cyber) Risk Management is highly preferred
• Experience with Business Continuity Planning and IT Disaster Recovery is highly preferred

What we offer

From our bustling home base in the Netherlands, you’ll have an impact on the whole of Europe. The counter now stands at more than 2,800 stores in 12 countries and millions of smiles from our customers. For Action and for you, we offer growth opportunities, a professional environment where you can develop without limits, and a culture that lives customer focus, teamwork, simplicity, discipline, cost consciousness and respect.

• Market‑based salary based on a 38‑hour work week
• Annual bonus based on company and personal performance
• 24 days of holiday and the option to buy 5 extra days (based on 38 hours per week)
• Temporary contract with the intention of offering a permanent contract in the long term
• Flexible working hours and the possibility of working up to 40% from home, coordinated with your team and manager
• 15% staff discount on your purchases at Action
• Good pension scheme, collective health insurance and travel expenses allowance. Zwaagdijk‑Oost is traffic‑jam‑free and only 30 minutes by car from Amsterdam. Public transport travelers will have transportation arranged from Hoorn station.

Contact

• [e-mail]