IT Security Officer

The IT Security Officer plays a crucial role in safeguarding the organisation’s information systems by implementing and enforcing security policies and governance regulations, including DORA and GDPR. This position is responsible for managing IT security risks, overseeing third-party and ICT provider risk management, and ensuring compliance with the Information Security Management System (ISMS). The role involves asset inventorisation and classification, serving as the primary contact for key insurance partners, and supporting business continuity planning. The IT Security Officer also leads training and awareness initiatives to promote a security-conscious culture across the organisation. Fluency in French is mandatory, with Dutch and English language skills preferred to effectively communicate within the diverse operational environment. Key requirements / What we look for Fluency in French; Dutch and English preferred Experience with implementation of DORA, GDPR, and ISMS compliance Proven skills in IT security risk management and third-party risk management Ability to manage asset inventorisation and classification of IT assets Strong communication skills to act as liaison with insurance partners and internal teams Experience in conducting training and awareness programs Knowledge of business continuity plans and their follow-up

Competitive salary package [specific range to be provided] Performance-based bonuses Health insurance coverage Paid leave and holiday entitlement Opportunities for professional development and training Supportive work environment fostering work-life balance

The company is a well-established organisation operating within the insurance sector, committed to delivering reliable and secure services to its clients. It prioritises strong governance and compliance frameworks to ensure data protection and operational resilience. The organisation values integrity, transparency, and collaboration, fostering a culture that emphasises continuous improvement and adherence to regulatory standards such as GDPR and DORA. Its vision is to be a trusted leader in IT security, safeguarding sensitive information and maintaining stakeholder confidence in an evolving digital landscape.