> Markdown version of [/jobs/ext/2236994-ict-security-risk-compliance-officer](https://www.wearedevelopers.com/jobs/ext/2236994-ict-security-risk-compliance-officer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# ICT Security, Risk & Compliance Officer

- **Company:** Udea
- **Location:** Veghel, Netherlands
- **Contract:** Permanent contract
- **Skills:** Microsoft Access, Microsoft Windows, Artificial Intelligence, Application Lifecycle Management, Cloud Computing, Control Objectives for Information and Related Technology (COBIT), Cyber Security, IT Management, Windows Servers, Azure Active Directory, Data Logging, Information Technology
- **Published:** August 26, 2026
- **Apply:** https://www.solliciteren-udea.nl/aanmaken-sollicitatie-incl-autorisatie-prs/standaard?VcSn=1813

## About the Role

Je bent analytisch, kritisch en vindt het leuk om complexe vraagstukken terug te brengen tot praktische oplossingen. Je schakelt gemakkelijk tussen techniek, beleid en de business.

Daarnaast beschik je over:

Opleiding en ervaring

 * HBO of WO werk- en denkniveau;
 * Een opleiding in de richting van IT, informatica, informatiebeveiliging, bedrijfskunde of vergelijkbaar;
 * Ervaring als systeembeheerder, security engineer of vergelijkbare IT-functie;
 * Affiniteit met governance, risicomanagement en compliance.

Technische kennis

 * Microsoft Entra ID (Azure AD);
 * Microsoft 365;
 * Windows Server en Windows endpoints;
 * Microsoft Defender en andere security-oplossingen;
 * Basiskennis van netwerken en cloudomgevingen;

Kennis van of interesse in

 * AVG/GDPR.
 * NIS2.
 * AI Act.
 * ISO 27001, NIST, COBIT of vergelijkbare frameworks.

## Description

Als ICT Security, Risk & Compliance Officer zorg je ervoor dat onze IT-omgeving veilig, beheersbaar en compliant blijft. Je vertaalt wet- en regelgeving naar praktisch beleid én naar concrete technische maatregelen binnen onze Microsoft-omgeving.

Je houdt je onder andere bezig met:

Security & compliance

 * Opstellen en onderhouden van informatiebeveiligingsbeleid;
 * Vertalen van AVG, NIS2 en AI Act naar praktische maatregelen;
 * Uitvoeren van interne controles en compliance-toetsingen;
 * Ondersteunen bij audits en externe onderzoeken.

Risicomanagement

 * Uitvoeren van ICT-risicoanalyses;
 * Beheren van risicoregisters en verbeteracties;
 * Adviseren van management over risico's en beheersmaatregelen;
 * Rapporteren over security, compliance en risico's.

Technische implementatie

 * Inrichten en optimaliseren van beveiligingsmaatregelen binnen Microsoft 365 en Entra ID;
 * Verbeteren van Identity & Access Management, MFA en Conditional Access;
 * Meewerken aan endpoint security, logging en monitoring;
 * Toetsen of technische maatregelen daadwerkelijk aansluiten op het beleid.

Advisering

 * Sparringpartner voor systeembeheer, applicatiebeheer en management;
 * Adviseren over security by design bij nieuwe projecten en leveranciers;
 * Bijdragen aan verdere professionalisering van IT-governance binnen de Biotope Group.


## Related Videos

- [Your Manager Doesn’t Come with a User Manual (But You Can Totally Write One)](https://www.wearedevelopers.com/videos/1495-your-manager-doesn-t-come-with-a-user-manual-but-you-can-totally-write-one)
- [Crypto-secure Data Management with In-Database Blockchain](https://www.wearedevelopers.com/videos/632-crypto-secure-data-management-with-in-database-blockchain)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [Hacking MSSQL on Cloud. All of them. How I became sysadmin on Azure, AWS, GCP and Alibaba.](https://www.wearedevelopers.com/videos/100339-hacking-mssql-on-cloud-all-of-them-how-i-became-sysadmin-on-azure-aws-gcp-and-alibaba)
- [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure)
- [Engineering/Manager Pendulum: Generating compound interest on your career](https://www.wearedevelopers.com/videos/100348-engineering-manager-pendulum-generating-compound-interest-on-your-career)

## Related Articles

- [Best Companies in the Netherlands: Top 25 Companies in 2023 ](https://www.wearedevelopers.com/magazine/193-best-companies-in-the-netherlands-top-25-companies-in-2023)
- [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market)
- [How to land a developer job in Amsterdam](https://www.wearedevelopers.com/magazine/36-how-to-land-a-developer-job-in-amsterdam)
- [The Netherlands – Europe’s powerhouse for software development?](https://www.wearedevelopers.com/magazine/31-the-netherlands-europe-s-powerhouse-for-software-development)
- [How to Find Tech Jobs in Amsterdam](https://www.wearedevelopers.com/magazine/279-how-to-find-tech-jobs-in-amsterdam)
- [Software Developer Salary in The Netherlands [2023]](https://www.wearedevelopers.com/magazine/217-software-developer-salary-in-the-netherlands-2023)