IT Security Officer, Utrecht

For one of our market leading clients in Utrecht, I'm recruiting for IT Security Office.

Role Overview As a IT Security Officer, you will operate at the intersection of security policy and technical execution within a large, mission-critical IT environment. You are the key technical bridge between security policy and the actual implementation within the IT department.

In this role, you protect the data and digital integrity of a large organization against evolving threats like data breaches and cyberattacks. You will work on high-impact projects involving modern technologies, including Cloud infrastructure, AI, containerization, and advanced data science platforms. You are not just an advisor; you are a hands‑on practitioner who leaves a tangible mark on our security architecture.

Key Responsibilities

Policy Implementation:

Translate high-level security policies into practical, technical controls and implementations, using established frameworks (e.g., BIO/ISO 27001) as your baseline.

Risk Management:

Conduct in-depth technical risk analyses, document findings, and ensure measures are executed and monitored.

Audit&Compliance:

Coordinate and report on information security assessments, internal reviews, and external audits (including DigiD, ENSIA, or equivalent regulatory frameworks).

Supplier&Cloud Security:

Monitor the implementation of security measures at external suppliers and across Cloud environments (Azure/AWS).

Security Culture:

Lead security awareness initiatives, including delivering presentations and training to various departments.

ISMS Maintenance:

Manage the Information Security Management System (ISMS) and maintain evidence for auditability.

Your Profile

Education&Experience:

Minimum HBO (Higher Professional) working and thinking level. Extensive experience in technical Information Security is required.

Certifications:

Mandatory Information Security Certification (e.g., CISSP, CCSP, or CISM).

Technical Skills:

Ability to translate security measures into concrete technical solutions; experience with penetration testing, compliance assessments, and vulnerability management.

Cloud Knowledge:

Knowledge of Azure and AWS platforms is highly preferred.

Language:

Excellent command of both Dutch and English (spoken and written).

Mindset:

Proactive, analytical, and capable of operating as an advisor to management while working closely with technical engineering teams.

#J-18808-Ljbffr