Information Security Officer

Information Security Officer Als Information Security Officer bij BNG versterk en borg je security by design in applicaties en cloud, ontwikkel en beheer je securityproducten/-processen, voer je assessments uit, coördineer je pentesten en zorg je voor opvolging van bevindingen. Direct solliciteren Neem contact op Automatisch verbeterd voor betere leesbaarheid Information Security Officer Role purpose: Lead and maintain the organization's information security program to protect data, systems, and operations by managing risk, ensuring compliance, and strengthening security controls. - Develop, implement, and continuously improve information security policies, standards, and procedures. - Conduct risk assessments, threat modeling, and security audits; track remediation to closure. - Oversee incident response planning, investigation, reporting, and post-incident improvements. - Manage security awareness training and promote a security-first culture. - Ensure compliance with applicable regulations and frameworks (e.g., ISO 27001, NIST, GDPR, HIPAA, PCI DSS as relevant). - Partner with IT and business teams to embed security in projects, vendor selection, and change management. - Monitor security metrics and report posture, risks, and priorities to leadership. Required skills and qualifications - Strong knowledge of security governance, risk management, and control frameworks. - Experience with security operations, vulnerability management, and incident handling. - Ability to translate technical risks into business impact and actionable plans. - Familiarity with cloud and on-prem security controls, identity and access management, and data protection. - Excellent stakeholder management, documentation, and communication skills. - Relevant certifications are a plus (e.g., CISSP, CISM, ISO 27001 Lead Implementer/Auditor). BNG is de vierde grootste bank van Nederland en gedreven door maatschappelijke impact. Onze focus ligt op het vers...