Information Security Officer

Project overview

The ISO is responsible for all aspects of information security within SBB.

Profile of the suited interim professional:

• Aligning information security activities and collaborating with the FG, privacy officer, and TISO
• Assessing project proposals and application requests in the area of information security
• Incorporating information security requirements in tenders
• Initiating penetration tests
• Coordinating actions for security incidents together with TISO/I&T and functional administrators
• Informing the manager V&R (CISO) and the management board about security incidents
• Submitting the information security policy note for decision-making in the MT
• Executing the roadmap for the information security policy
• Initiating and assessing plans for business continuity and disaster recovery
• Implementing the information security policy and taking measures in accordance with the BIO2/ISO framework
• Increasing risk awareness and creating support for information security and privacy within the organization
• Realizing measures from periodic risk analyses and ensuring them in an ISMS
• Minimum 4 years of experience as an Information Security Officer and more than 7 years of relevant experience in the IB field
• Extensive experience in applying the ISO 27001/2 and BIO framework
• HBO or WO diploma in a relevant field
• Relevant certifications such as CISSP, CISM, or CISA
• Demonstrable experience in implementing an IB risk management system (ISMS)
• Affinity with digitalization and AI
• Experience with setting up awareness campaigns around information security
• Independent, structured, and results-oriented work style
• Experience in a public organization or societal environment is recommended

Project details

• Start: flexible
• Duration: 3 months
• Location: Zoetermeer, North-Holland, South-Holland, NL
• Languages: Dutch