Technical Information Security Officer

Project overview

Job description

For our end client Gemeente Haarlemmermeer, we are looking for a Technical Information Security Officer

As a Technical Information Security Officer (TISO), you are responsible for identifying, assessing, and managing information security risks within the AI "sprint". You will work in a multidisciplinary team using an agile methodology and collaborate closely with the Privacy Officer, Technical Security Engineer, product owner, and other specialists.

Your primary focus is on ensuring information security throughout the development of the AI prototype. You will ensure that security principles, risk management, and compliance with municipal frameworks are an integral part of the solution from day one.

You will contribute to risk analyses, the development of control measures, the DPIA, the risk log, and the assessment of architectural and design choices. Additionally, you will advise on appropriate security measures and verify the solution against relevant laws and regulations, the BIO (Government Information Security Policy), and municipal information security frameworks.

Structured work, documenting risks, decisions, and residual risks, and documenting security measures are essential parts of the assignment. This will result not only in a working solution but also in a prototype whose security risks are transparent, appropriate control measures have been taken, and which can be responsibly further developed in a potential follow-up phase.

Responsibilities

The Technical Information Security Officer (TISO) will be engaged for the duration of the AI "sprint" and the directly related preparation and follow-up activities. The engagement is an average of 32 to 36 hours per week.

Given the nature, complexity, and short turnaround time of the assignment, a single senior professional is explicitly sought who will be responsible for identifying, assessing, and managing information security risks and ensuring the security frameworks around the solution throughout the entire assignment. Continuity, rapid decision-making, and consistent security assessments are essential.

The assignment consists of three phases:

During the "sprint" week, the TISO is expected to be fully available and physically present at the municipal work location Beukenhorst in Hoofddorp. The intensive collaboration between the different disciplines requires direct coordination, rapid risk assessment, and joint decision-making. Working from home during this week is therefore not suitable. Physical presence on location is also expected during the preparation and follow-up phases, unless incidentally agreed otherwise.

Job requirements

As a TISO, you have demonstrable experience with information security issues within complex organizations. You are capable of identifying and assessing risks and translating them into practical and proportionate control measures. You are also familiar with agile working and know how to collaborate effectively in multidisciplinary teams where development, security, privacy, compliance, and management converge.

You are able to make information security risks transparent and translate them into concrete control measures. You will also actively contribute to the risk log, DPIA, security frameworks, risk acceptances, and the decision-making that takes place during the AI "sprint". You will ensure that security considerations are demonstrably documented and that the solution can be responsibly managed and further developed.

Company information

Haarlemmermeer is one of the largest municipalities in the Netherlands with 162,000 inhabitants. 18,500 hectares of land, made up of 32 centers, create an area full of exciting contrasts. We have vast landscapes and agricultural land, impressive urban architecture, and high-tech multinationals. And not to forget Schiphol. We are a young municipality, but at the same time have a rich history, partly reflected in the Stelling van Amsterdam with its 19th-century pumping stations. Haarlemmermeer is constantly developing. It is a dynamic place where people want to live, work, and recreate.

It is green and urban at the same time.

Building Haarlemmermeer and managing our organization requires drive. If you have that, combined with a results-oriented approach, you will fit in well with us. And with our ambition to become one of the best service municipalities in the Netherlands. We need professional people for that, who are actively involved in society. We offer you every opportunity for broad development, have attractive employment conditions, and offer a different work environment every day.

The municipal organization is divided into 5 domains. One of the domains, Business Operations, includes several support clusters that handle support for the entire municipal organization in areas such as housing, procurement, legal affairs, personnel policy, finance, and ICT.

You will be working within the future DIGI cluster (Data, Information, and Digital Innovation), in the Data Team. This cluster is set up to elevate data-driven working within the municipality to a higher level.

Naturally, this vacancy is open to anyone who recognizes themselves in this.

apply via Randstad Professional

contact

Dejano de Meza

[contact removed]

[contact removed]

The application process

This is how applying via Randstad Professional works. Discover how we can help you find a job.

1 of 5

Our consultant Dejano de Meza reviews your profile

We always look further with an eye for your talent and experience

2 of 5

We provide clarity quickly

Within 2 working days, you will know exactly where you stand and what the next steps are

3 of 5

Personal advice

If there's a match, we'll delve into your ambitions, expertise, and career opportunities together

4 of 5

Proposals to top clients

We will introduce you to the client and guide you towards the perfect challenge

5 of 5

A tailored offer

Together, we'll close the deal with an attractive contract for an interim assignment or permanent position

-

• Impact analysis / quick scan of relevant BIO legislation.
• Performing and guiding information security risk analyses.
• Identifying, assessing, and documenting security risks in the risk log.
• Advising on appropriate technical, organizational, and procedural control measures.
• Verifying the AI solution against the BIO, municipal security frameworks, and relevant laws and regulations.
• Assessing architecture, cloud, and integration choices from an information security perspective.
• Identifying risks related to AI, data, supplier dependencies, and data exchange.
• Contributing to the DPIA and formulating information security measures.
• Documenting security considerations, risk acceptances, and residual risks.
• Advising on access control, logging, monitoring, incident management, and management processes.
• Ensuring that the solution is responsible, manageable, and implementable from an information security perspective.
• Preparation phase: the week prior to November 23, 2026, focusing on risk analysis, compliance alignment, preparation of the DPIA, drafting the initial risk log, and defining security frameworks.
• AI "sprint": the week of November 23, 2026, during which the multidisciplinary team will develop, test, and demonstrate a working prototype over five working days. The TISO will assess risks, advise on control measures, and support decision-making regarding information security.
• Follow-up phase: the weeks after the "sprint", focusing on finalizing the risk log, documenting residual risks, advising on implementation, and transferring security advice and documentation.
• Minimum of 5 years of work experience as a TISO, Information Security Officer, Security Consultant, Security Advisor, or similar role.
• Demonstrable experience with information security, risk management, and security governance.
• Experience in conducting and guiding risk analyses and preparing security advice.
• Extensive knowledge of relevant standards and frameworks such as BIO/BIO2, ISO 27001, GDPR, and preferably the AI Act.
• Experience with cloud environments, data exchange, and digital services.
• Experience in assessing architectural and supplier risks.
• Experience with AI, data, or automation issues is a plus.
• Experience within the (semi-)public sector or an organization with high demands on compliance and information security is a plus.

Project details

• Start: flexible
• Location: Hoofddorp, NL
• Languages: Dutch