> Markdown version of [/jobs/ext/3194921-business-information-security-officer](https://www.wearedevelopers.com/jobs/ext/3194921-business-information-security-officer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Business Information Security Officer

- **Company:** PricewaterhouseCoopers International Limited
- **Location:** Amsterdam, Netherlands
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Artificial Intelligence, Cyber Security, IT Management
- **Published:** September 9, 2026
- **Apply:** https://www.careerjet.nl/job/nl39cf528a0216c118acc4cecd0d389d9e/eaa

## About the Role

5+ years of professional experience in information security, IT governance, compliance, risk management, and internal control.
Hands-on experience implementing and maintaining ISO 27001, SOC 2, and NIS2 (not only advising on them); security project management experience is a strong plus.
Solid understanding of internal audit processes, control testing, issue remediation, and how to build evidence that meets regulator and auditor standards.
Knowledge of AI governance, AI risk, and emerging technology controls, plus previous hands-on IT or cybersecurity experience as a strong advantage.
Previous hands-on IT, or cybersecurity experience during your early career stages is a strong advantage.
Fluent in Dutch at a professional level.

## Description

Do you want to shape how PwC Netherlands protects its people, clients, and data in a rapidly changing regulatory landscape? Are you ready to take ownership of security governance, risk, and compliance across one of the country's leading professional services firms?
In this role you'll lead the CISO office's work on internal control, audit readiness, and the implementation of frameworks like ISO 27001, SOC 2, NIS2, and DORA. You'll also help shape PwC NL's approach to AI governance and drive our annual security risk assessment. It's a visible role with direct impact on how we manage security risk across the member firm.
This is what you'll do
You'll join the CISO office, a team of informal and ambitious professionals who work closely together on meaningful, firm-wide security topics. You'll act as a subject matter lead on internal security, risk, and control initiatives, translating global policy into practical standards and ways of working for PwC NL. You'll work hands-on with auditors, business stakeholders, and technology teams to embed security into our day-to-day operations, while also driving forward strategic programs around resilience, regulatory readiness, and AI governance. You'll report regularly to senior stakeholders on control status, audit findings, regulatory readiness, and risk themes.
Lead the CISO office's work on the internal PwC control framework and act as SME for internal audit, including preparation, evidence testing, remediation tracking, and control maturity improvement.
Drive the implementation, upkeep, and continuous improvement of ISO 27001, SOC 2, NIS2, and DORA, and manage the CISO office pillar of PwC NL's internal IT Unified Control Framework.
Lead the global and local annual security risk assessment and manage PwC NL's security awareness campaigns.
Implement and maintain the firm's approach to AI governance and risk management, including policy development, risk assessment, control definition, and oversight of responsible use.
Partner with internal committees and lines of service to ensure security, risk, and control requirements are understood, workable, and embedded across the business.
You recognize yourself in this
You're a proactive professional who combines a structured, consultative approach with a hands-on delivery mindset. You communicate practively and clearly with both technical teams and business stakeholders, and you know when to set firm guardrails and when flexibility is the smarter choice.


## Related Videos

- [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure)
- [Your Manager Doesn’t Come with a User Manual (But You Can Totally Write One)](https://www.wearedevelopers.com/videos/1495-your-manager-doesn-t-come-with-a-user-manual-but-you-can-totally-write-one)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [Edit Your Future: Queerverse Radical AI](https://www.wearedevelopers.com/videos/909-edit-your-future-queerverse-radical-ai)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Engineering/Manager Pendulum: Generating compound interest on your career](https://www.wearedevelopers.com/videos/100348-engineering-manager-pendulum-generating-compound-interest-on-your-career)

## Related Articles

- [Best Companies in the Netherlands: Top 25 Companies in 2023 ](https://www.wearedevelopers.com/magazine/193-best-companies-in-the-netherlands-top-25-companies-in-2023)
- [How to land a developer job in Amsterdam](https://www.wearedevelopers.com/magazine/36-how-to-land-a-developer-job-in-amsterdam)
- [How to Find Tech Jobs in Amsterdam](https://www.wearedevelopers.com/magazine/279-how-to-find-tech-jobs-in-amsterdam)
- [The Best Tech Hubs in Europe: 5 Best Cities For Software Engineers](https://www.wearedevelopers.com/magazine/246-the-best-tech-hubs-in-europe-5-best-cities-for-software-engineers)
- [Software Developer Salary in The Netherlands [2023]](https://www.wearedevelopers.com/magazine/217-software-developer-salary-in-the-netherlands-2023)
- [The Netherlands – Europe’s powerhouse for software development?](https://www.wearedevelopers.com/magazine/31-the-netherlands-europe-s-powerhouse-for-software-development)