Hybrid Information Security Officer

at The Partnership for Supply Chain Management

• Job title: Information Security Officer
• Job type: Full Time
• Experience level: Senior, Lead
• Salary: Not specified
• Degree requirement: Bachelor's Degree
• Tech skills: Cloud
• Location requirements: Hybrid, Woerden, Netherlands

About the role

• Information Security Officer ensuring confidentiality, integrity, and availability of data for PFSCM. Collaborating with IT leadership and external partners on security program implementation.

Responsibilities

• Develop, implement, and maintain information security policies, procedures, and standards in alignment with organizational objectives and regulatory requirements (e.g., GDPR, ISO 27001).
• Conduct regular risk assessments, vulnerability scans, and security audits to identify and address potential threats to information assets.
• Lead incident response planning and execution, including investigation, containment, remediation, and reporting of security incidents.
• Oversee identity and access management, ensuring appropriate controls for user authentication and authorization.
• Collaborate with IT teams (Cloud & Infrastructure, Data Engineering & Applications) to ensure security best practices are integrated into all technology initiatives and operations.
• Monitor security trends, emerging threats, and regulatory changes, and recommend appropriate risk mitigation strategies.
• Manage PFSCM’s security awareness training program for staff, contractors, and partners to foster a security-conscious culture.
• Ensure compliance with contractual, legal, and regulatory requirements related to information security and data privacy.
• Prepare and present regular reports on security posture, risks, and incidents to the IT Director and executive leadership.
• Manage relationships with external security vendors, auditors, and regulatory bodies as needed.

Requirements

• Bachelor’s or master’s degree in information security, Computer Science, Information Technology, or a related field.
• 7+ years of experience in information security, risk management, or related IT roles.
• Professional security certifications preferred (e.g., CISSP, CISM, CISA, ISO 27001 Lead Implementer).
• Strong knowledge of security frameworks, standards, and regulations (e.g., ISO 27001, NIST, GDPR).
• Ability to work comfortably with Microsoft Office software, specifically Word, Excel, and PowerPoint.
• Preferably advanced user level of Excel.
• Willingness and availability to travel, and perform other duties as needed.
• Must be eligible to work in the Netherlands.

Benefits

• Flexible work arrangements
• Professional development opportunities