Required skills
- Information Security Management
- ISO 27001
- BIO
- Risk Management
- ISMS
- CISSP
- CISM
- CISA
- Business Continuity
- Disaster Recovery
- Information Security Policy
- Security Awareness
Nice to have:Public SectorEducation SectorAIDigitalization
Languages: Dutch
Job description
SBB is seeking an experienced Information Security Officer (ISO) for a temporary assignment to coordinate and implement information security measures, policies, and risk management within the organization.
Project overview
- Freelance and secondment are both permitted
- Ensure all requirements and wishes are clearly reflected in the CV SBB is looking for an Information Security Officer (ISO) with at least 6 years of experience in all aspects of information security as an ISO in a medium-sized organization, and preferably in the public sector. This is a temporary assignment for 32 to 36 hours/week for at least 3 months with an option to extend by 3 months. Information security at SBB has been brought to a higher level of maturity in recent years, and we aim to maintain it at level 3 in the coming period and to implement the associated roadmap. The assignment involves a full ISO role for all activities in the field of information security, such as: Coordinating information security activities and collaborating with the DPO, privacy officer, and TISO; Reviewing project proposals and application requests regarding information security together with other disciplines of the CIO Office (architects, privacy officer); Taking up information security requirements in tenders; Initiating pentests: determining scope, selecting a supplier together with procurement, and guiding the pentest; In case of security incidents, coordinating action with TISO/IT and functional administrators; Reporting to the manager V&R (CISO) and the management board on security incidents; Submitting the information security policy note, which has already been drafted and presented to the MT for imaging together with the V&R manager for decision-making, to the MT; Executing the roadmap for information security policy and coordinating it with TISO/IT; Initiating and reviewing plans for business continuity and disaster recovery. Your tasks You are responsible for implementing the information security policy and taking adequate measures in the field of information security in accordance with the standard framework (BIO2/ISO). You will work on behalf of the management board, closely collaborating with our data protection officer in the Information Security and Privacy team and with line management. Your goal is to increase risk awareness and create support for information security and privacy within all layers of SBB. You are capable of realizing measures from the periodic IS risk analysis and ensuring their embedding in a quality system for information security (ISMS). Your main tasks are: You translate policy into concrete security measures for SBB's services and business operations. You promote and ensure risk awareness in the organization. You are responsible for translating and embedding policy into solution directions and measures based on identified risks. You draw up and update information security plans. You contribute to the development of information security measures and coordinate their implementation. You review guidelines against policy and advise on improvements where necessary. You follow external developments in the field of information security policy. You ensure that information security is part of SBB's project portfolio. You report on information security in the P&C management reports. With your knowledge and experience, you are able to bring the business and your team along in the transition from 'unconsciously taking risks' to 'consciously taking risks'. Positioning You are part of the V&R team and report to the Department Manager V&R. Requirements A relevant completed HBO/WO education in a relevant field. At least 4 years of experience in a comparable Information Security Officer role and more than 7 years of relevant experience in the IS field, within the government; experience within education is a big plus; demonstrable experience with further implementing an IS risk management system (ISMS); experience with information security awareness interventions. Extensive experience with applying the ISO 27001/2 and BIO standard framework. Relevant certifications in the field of information security, such as CISSP, CISM, CISA. A results-oriented, solution-oriented, and integral attitude. Collaborative through a connecting and constructive-critical working style. Ambitious to further establish information security at SBB. Clear and business-like in making and keeping appointments. Works independently, structured, and results-oriented. Has affinity with AI and digitalization The professional will, in consultation, arrange to work at least 3 days per week on-site in Zoetermeer. When working remotely, the professional is expected to communicate independently and effectively with colleagues. The method of execution remains the responsibility of the professional and takes place within agreed frameworks. At least 4 years of experience in a comparable Information Security Officer role and more than 7 years of relevant experience in the IS field, within the government; Experience within a public organization or societal context.
Project details
- Start: 2026-11-29T23:00:00
- Location: Zoetermeer Zuid-Holland, NL
- Languages: Dutch
Indexed by 9am's meta-search. You are a job provider? Claim or manage this listing
Found on Striive (HeadFirst / Between)