Required skills
- Information Security Officer
- Information Security
- Privacy
- Risk Management
- ISO 27001
- ISO 27002
- BIO
- CISSP
- CISM
- CISA
- Business Continuity
- Disaster Recovery
Languages: Dutch
Job description
Seeking an Information Security Officer to coordinate all information security activities, assess project proposals, and manage security incidents within the SBB Information Security and Privacy team.
Project overview
The assignment involves a full-fledged ISO role within SBB's Information Security and Privacy team.
Profile of the suited interim professional:
- Coordinate all information security activities in collaboration with the FG, privacy officer, and TISO
- Review project proposals and application requests for information security aspects
- Include security requirements in procurement processes
- Initiate and manage penetration tests, including scope and supplier determination
- Coordinate the response to security incidents together with TISO/I&T and functional management
- Report on security incidents to the Manager V&R (CISO) and the management board
- Submit the information security policy note for decision-making in the MT
- Execute and align the roadmap for information security policy
- Review and draft business continuity and disaster recovery plans
- Translate policy into concrete security measures for business operations
- Increase risk awareness and support for information security within the organization
- Ensure measures are embedded in a quality system for information security (ISMS)
- Prepare and update information security plans
- Test guidelines against policy and advise on improvements
- Follow external developments in information security
- Integrate information security into SBB's project portfolio
- Report on information security in the P&C management reports
- Completed relevant higher professional education (hbo) or university (wo) degree
- Minimum of 4 years of experience as an Information Security Officer and more than 7 years of experience in the IB field, preferably within the government sector
- Proven experience in establishing an IB risk management system (ISMS)
- Experience in setting up awareness interventions around information security
- Several years of experience working with the ISO 27001/2 and BIO standard frameworks
- Relevant certifications such as CISSP, CISM, or CISA
- Interest in and feel for AI and digitalization
- Availability to work at least 3 days per week on location in Zoetermeer
- Excellent command of the Dutch language in word and writing
Project details
- Start: flexible
- Duration: 3 months
- Location: Zoetermeer, North-Holland, South-Holland, NL
- Languages: Dutch
Indexed by 9am's meta-search. You are a job provider? Claim or manage this listing
Found on planetinterim.com