Technical Information Security Officer

Role purpose: Lead and strengthen the organization’s technical information security posture by defining controls, reducing risk, and enabling secure operations across systems, networks, and cloud environments., * Develop, implement, and maintain technical security standards, baselines, and hardening guidelines.

• Oversee security architecture and engineering reviews for new and existing solutions.
• Manage vulnerability management processes, including scanning, prioritization, remediation tracking, and verification.
• Monitor and respond to security incidents; coordinate investigation, containment, and lessons learned.
• Support risk assessments, threat modeling, and security exception handling with clear documentation.
• Ensure security controls align with applicable frameworks, policies, and regulatory requirements.
• Partner with IT, DevOps, and business stakeholders to embed security into projects and operations., * Reviewing technical designs and security measures (e.g., IAM, firewalls, according NN security standards) for the designs of the technical environment: network, infrastructure (both cloud and on-premise datacenters), external connections etc
• Working with team of information security officers on a wide variety of security and compliance tasks, e.g. periodic control tracking, deep-dive product reviews, threat modelling, vulnerability assessments and supply chain security etc
• Working in close cooperation with the DevOps teams to proactively identify risks and support teams to implement the appropriate security measures
• Supporting security and compliance projects and initiatives such as automation of security compliancy, Who you will work with

Within our organization, all business units are responsible for safeguarding the security of the IT environment. A key challenge for the BSO team is to review, validate, and ensure the correct implementation of technical security measures, while actively supporting DevOps teams in achieving this.

The BSO team plays a critical role in balancing residual risks against required security controls, enabling product owners and their teams to make well-informed, risk-based decisions. Continuous improvement of IT security processes and procedures through standardization and automation is essential for increasing quality, reducing manual effort, and enhancing consistency across the organization.

As a member of the BSO Team, your role is to review and support the implementation of security standards and guidelines, ensuring a structured, consistent, and well-aligned approach to IT security and compliance.

• Strong knowledge of network, endpoint, identity, and cloud security concepts and controls.
• Hands-on experience with security monitoring, logging, SIEM/SOAR, and incident response practices.
• Proficiency in vulnerability management tools and remediation workflows.
• Ability to translate technical findings into actionable risk and control recommendations.
• Familiarity with security frameworks and standards (e.g., ISO 27001, NIST, CIS) and secure SDLC principles.
• Excellent stakeholder communication, documentation, and prioritization skills.

NN Group IT / Enterprise Engineering Technology is looking for an Information Security Officer who is able to take a proactive role in the management of information security risks. The ideal candidate has a strong foundation in IT security and compliance practices, is well versed in relevant industry standards, and actively contributes to the adoption, improvement, and effective implementation of security processes, and controls. You take ownership, work independently where needed, and collaborate closely with stakeholders to embed security into daily operations.

You are committed to staying current with emerging security trends, threats, and regulatory developments, and you are able to identify opportunities for new initiatives that further enhance the organization’s security maturity and resilience., * You are proactive and result-driven and ensure you meet agreements made

• Detail oriented, with the ability to maintain a clear overview of risks, priorities, and objectives
• Clear communication style and being able to cooperate with people with various backgrounds
• A true team player who is flexible and supportive, and able to adapt to changing priorities
• Skilled and experienced, with at least five years of experience in IT and information security. Experience with network connectivity products is preferred. You preferably hold a bachelor’s or master’s degree in IT, or another relevant technical and/or security-oriented field. CISSP, SSCP, or other relevant security and technical certifications are considered an advantage

NN invests in an inclusive, inspiring work environment and in skills and competences for the future. We match this with employee benefits that are in line with what is needed today and in the future. This way, we offer our employees the opportunity to get the best out of themselves. We offer you:

• Salary between €4,527 and €6,036 based on 36 hours depending on your knowledge and experience
• 13th month and holiday allowance are paid with your monthly salary
• 27 vacation days for a 5-day working week and three Diversity Days
• A modern pension administered by BeFrank
• Plenty of training and learning opportunities
• NS Business Card 2nd class, which gives you unlimited travel, also privately. Do you prefer to travel with your own transport? Then you can declare the kilometers travelled
• Allowances for setting up your home office and for internet use