Information Security Officer - Senior

Our client’s IT Security Department brings together specialized teams in Identity & Access Management (IAM), Cyber Defense, and Governance, Risk & Compliance (GRC). The department ensures that business processes and IT systems (internally developed and third-party applications) are secure, compliant, and aligned with regulatory requirements. The team is currently looking for an Information Security Officer specialized in IAM & Cloud Security to support internal entities in managing information risks and strengthening identity governance across multi-cloud environments. Main Responsibilities Define and oversee IAM security policies and standards across multi-tenant cloud environments (Azure, AWS). Ensure proper implementation of identity lifecycle management processes (joiner, mover, leaver). Supervise authentication and authorization mechanisms (SSO, MFA, Conditional Access, PAM/PIM). Promote and enforce Zero Trust principles (least privilege, segregation of duties, conditional access). Conduct risk assessments related to identity and cloud access management (impact/likelihood analysis). Ensure IAM controls comply with governance frameworks (ISO 27001, SOC 2, GDPR, NIST). Organize and monitor periodic access reviews and access recertification campaigns. Improve IAM monitoring, logging, and audit capabilities in collaboration with security operations teams. Maintain security documentation (policies, procedures, standards, risk registers). Provide security guidance to cloud engineering and application teams. Follow ICT security trends and recommend improvements to identity governance practices.

Minimum 5 years of experience in IT Security within hybrid and multi-cloud environments. Strong knowledge of cloud IAM solutions (Azure AD/Entra ID, AWS IAM, GCP IAM). Good understanding of OAuth 2.0, OIDC, SAML, RBAC / ABAC models, and Privileged Access Management (PAM/PIM). Experience with identity governance tools (SailPoint, Saviynt, CyberArk, BeyondTrust) is a plus. Familiarity with Zero Trust Architecture principles. Experience with risk management and compliance frameworks (ISO 2700x series, NIST). Basic scripting/automation knowledge (PowerShell, Python) is an asset. Soft Skills Strong analytical and risk assessment skills Autonomous and structured working approach Strong communication and stakeholder management skills Ability to balance operational needs with security requirements Customer-oriented mindset Education & Certifications Master’s degree in Computer Science, Engineering, Mathematics, or equivalent experience Security certifications (CISSP, CISM, ISO 27001 Lead Implementer/Auditor, etc.) are considered a plus Languages French and/or Dutch English