Head of Information Security

We are looking for an experienced Information Security professional to take responsibility for our clients strategy, team, and program to keep the information and operational systems protected.

As the Head of Information Security you will oversee the development and implementation of the entire information security strategy, including policies, procedures and tooling to protect enterprise communications, systems, and assets from threats.

This candidate is required to be based in The Netherlands. Occasional on-site required in Amsterdam. 


Leadership :

Develop, implement, and monitor the enterprise information security and risk management program
Work directly with business units to facilitate risk assessment and processes
Develop information security management frameworks and associated policies

Security Operations:

Monitor the security and compliance, including managing third-party vendors and monitoring tools
Evaluate security, compliance and information governance technologies
Ensure compliance with relevant security policies, standards, regulations, and laws
Ensure applicable data is classified, managed, stored and retained in accordance with best-practice and applicable laws
Oversee the approval, training, and dissemination of security policies and practices
Take responsibility for statutory attestations and achieving key information security accreditations to demonstrate best-practice

Vendor Management:

Manage security vendors and service providers.
Work with the procurement team to ensure that third-party providers are compliant with the organization's security policies


Skills and Experience

Proven experience in developing and managing security policies and procedures
Experience with cloud security, in particular Azure 
In-depth knowledge of information security frameworks (e.g., ISO 27001, NIST)
Strong understanding of relevant legal and regulatory requirements, such as GDPR
Excellent leadership, communication, and project management skills

Education and Experience:

Minimum of 10 years of experience in a combination of risk management, information security, and IT roles
At least 1 project working in a senior management position