> Markdown version of [/jobs/ext/363064-business-information-security-officer-biso](https://www.wearedevelopers.com/jobs/ext/363064-business-information-security-officer-biso). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Business Information Security Officer (BISO) - **Company:** ING Bank N.V. - **Location:** Amsterdam, Netherlands - **Experience:** Expert - **Salary:** €542.0 - €866.0 - **Contract:** Permanent contract - **Skills:** Cyber Security, Identity and Access Management, IT Management, Network Security, Software Vulnerability Management, Cyber Threat Analysis, Information Technology - **Published:** June 21, 2026 - **Apply:** https://nl.indeed.com/viewjob?jk=119bb586293294b4 ## About the Role Do you have a Master's degree?, We hire smart people like you for your potential. Our biggest expectation is that you'll stay curious. Keep learning. Take on responsibility. In return, we'll back you to develop into an even more awesome version of yourself. * University and/or postgraduate (Master's) degree in computer science or a comparable education. * 7+ years of experience in cyber risk management roles, ideally in a CISO department or 2LoD. * Solid understanding of relevant regulations (e.g., DORA, EBA). * Cybersecurity expertise across SDR, Vulnerability Management, Network Security, IAM, and IT Resilience, with a strong results orientation and the ability to drive complex security issues to resolution in a structured and timely manner * Good judgment and decision-making. * Stakeholder management skills - combines assertiveness with sound judgement; able to challenge effectively, influence senior stakeholders, and deliver tangible risk reduction outcomes * Strong analytical skills and critical thinking * Project management and reporting skills. * Strong consulting, negotiation, and presentation skills. * Certifications such as CISSP, CISM, CRISC, or CISA are preferred. * Strong English (spoken and written) is required. * Dutch language skills are preferred. ## Description The BISO function acts as a customer success manager for Tech NL IT leadership, ensuring a secure and compliant practice across the IT domain(s). BISOs ensure alignment with regulatory requirements, challenge the effectiveness of controls, and advise CISO NL and Tech NL IT leadership on risk exposure and mitigation strategies. Roles and responsibilities * Acting as an IT risk and security representative for the Tech NL IT domains. * Developing and overseeing the implementation of IT risk and security policies, control standards, and procedures within Tech NL IT domains. * Working with Tech NL IT leads and IT area leads to establish and maintain a structured IT risk and security management program, maintaining risk exposure at target levels and, where possible, reducing and/or mitigating IT and cyber risks. * Providing guidance and support to Tech NL IT domains on IT risk and security best practices. * Assisting and advising Tech NL IT domains on IT risk, security and compliance (IT risk controls, IT risk metrics, CAS findings, MIAs, vulnerabilities, and other issues). * Supporting the drafting of required MIAs and risk acceptance, and remediation of IT risk issues and security incidents. * Facilitating IT risk and security awareness training programs. * Initiating improvements across risk areas, audits, and policies. * Monitoring and reporting on the status and progress of the IT risk and security compliance state, issue mitigation, audit findings, and other relevant KRIs and KPIs. ## Related Videos - [Unleashing the power of AI to prevent financial crime](https://www.wearedevelopers.com/videos/1088-unleashing-the-power-of-ai-to-prevent-financial-crime) - [Small, Secure, Interconnected: The next Internet Protocol](https://www.wearedevelopers.com/videos/100062-small-secure-interconnected-the-next-internet-protocol) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [Your Manager Doesn’t Come with a User Manual (But You Can Totally Write One)](https://www.wearedevelopers.com/videos/1495-your-manager-doesn-t-come-with-a-user-manual-but-you-can-totally-write-one) - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data) ## Related Articles - [Best Companies in the Netherlands: Top 25 Companies in 2023 ](https://www.wearedevelopers.com/magazine/193-best-companies-in-the-netherlands-top-25-companies-in-2023) - [How to land a developer job in Amsterdam](https://www.wearedevelopers.com/magazine/36-how-to-land-a-developer-job-in-amsterdam) - [How to Find Tech Jobs in Amsterdam](https://www.wearedevelopers.com/magazine/279-how-to-find-tech-jobs-in-amsterdam) - [Software Developer Salary in The Netherlands [2023]](https://www.wearedevelopers.com/magazine/217-software-developer-salary-in-the-netherlands-2023) - [Average Salary in The Netherlands](https://www.wearedevelopers.com/magazine/272-average-salary-in-the-netherlands) - [The Netherlands – Europe’s powerhouse for software development?](https://www.wearedevelopers.com/magazine/31-the-netherlands-europe-s-powerhouse-for-software-development)