Information Security Officer, Utrecht

SurePay is growing, and we are now looking for an Information&Security Officer to join us and help strengthen our business operations. Do you thrive in a complex and dynamic environment? And are you well-versed in information security and compliance? If so, we want to meet you! At SurePay we work every day to make payments safer, more secure and more personal. We're on a mission to offer and implement our SaaS solutions throughout Europe. This role within SurePay is of high importance to ensure the avoidance of a variety of issues and safeguard information security standards.

Your main focus will be on ensuring that we are compliant with our ISAE 3000 and ISO27001 standard. You will work alongside the Compliance&Risk Manager and another Security Officer within your own team to ensure efficiency in running the business across various European countries. Of course, you will liaise with many other colleagues across the organisation to ensure that standards are met everywhere, including our Legal team. This position is ideal for a proactive candidate who can manage their own tasks independently without needing a lot of supervision.

Required skills

Bachelor’s degree in Information Security, Computer Science, or related field.

2-3 years of experience in information security compliance.

Familiarity with ISO27001, SOC2, or ISAE 3402/300 audits.

Strong documentation and policy-writing skills.

Ability to work independently and manage own tasks, a strong individual contributor who does not require a lot of supervision and follow-ups.

Good at planning and stakeholder management.

Strong organizational skills and can-do mentality.

Fluency in English.

Your main tasks

Handle ISO27001, and ISAE 3000 audits and other customer audits.

Participate in internal audits.

Ensure that policies and procedures are documented and updated.

Respond to third-party due diligence questionnaires and perform contract reviews.

Identify security risks and assist the Compliance&Risk Manager in coming up with mitigation plans.

Participate in risk awareness programs.

Understand and implement basic AWS security best practices.

Understand and implement basic secure software development lifecycle (SDLC) requirements.

Implement and manage CIS Level1/2 controls using JAMF Pro.

Working closely with the Legal Counsel, Compliance&Risk Manager, Security Officer and Security Engineer

What we offer

Competitive Salary

MacBook Pro, Iphone and the necessary appliances

8% holiday allowance

8% personal benefit budget which you could spend on extra (20!) holiday days, salary or training

A bonus arrangement

Travel costs compensation

25 holiday days annually

Pension plan

Flexible working hours and hybrid work environment

A position with a lot of freedom and responsibility

An ambitious, fast growing company with 30+ nationalities in the team

#J-18808-Ljbffr