> Markdown version of [/jobs/ext/724476-information-security-officer](https://www.wearedevelopers.com/jobs/ext/724476-information-security-officer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Information Security Officer - **Company:** Bizzdesign - **Location:** Utrecht, Netherlands (Remote available) - **Experience:** Experienced - **Contract:** Permanent contract - **Skills:** Artificial Intelligence, Software as a Service, Cyber Security - **Published:** June 29, 2026 - **Apply:** https://nl.indeed.com/viewjob?jk=96ee999d07d4a8bc ## About the Role Do you have experience in Security?, * Speak fluent English * Have +3 years of experience in a similar role, * 3-5 years of experience in Information Security, GRC, or Security Assurance. * Strong knowledge of frameworks such as ISO27001, SOC 2 (additional frameworks are a plus). * Experience handling customer security questionnaires and discussions. * Ability to balance compliance requirements with practical implementation. * Strong stakeholder management skills, including communication with senior internal and external stakeholders. * Fluent in English, Dutch is a plus. Nice to have: * Relevant certifications (e.g., CISSP, CISM, ISO27001 Lead Implementer/Auditor). * Experience in a SaaS or product-driven environment. Experience with Compliance Automation Tools e.g. Vanta, Drata. ## Description This role is designed to play a key role within Bizzdesign's Security & Compliance function. You will own and drive our security assurance program, covering frameworks such as ISO 27001, SOC 2, and other relevant standards. In this role, you combine governance, risk & compliance (GRC) with a strong customer-facing component, acting as a trusted security partner for both internal stakeholders and external clients. Following recent mergers, you will have the opportunity to shape and streamline the security posture across the group, driving harmonisation, maturity, and scalability. What will you do * Own and manage Bizzdesign's security frameworks (ISO27001, SOC2, etc.) and associated control environment. * Design, implement, and continuously improve security policies, procedures, and controls. * Act as the primary contact for customers and prospects on security topics (RFPs, due diligence, calls) and work with legal on contract reviews. * Translate security requirements into clear, business-friendly responses and solutions. * Drive risk management activities, including identification, assessment, and mitigation tracking. * Lead and coordinate internal and external audits, including preparation, evidence collection, and follow-up. * Work closely with the product teams to ensure controls are practical and effective. * Support and lead security improvement and transformation initiatives across the organisation, * Please submit your application in English, as it's our company's language, and you'll be using it daily once you're part of the team. * Please apply through our website or via the LinkedIn job post. Applications sent by email will not be reviewed. * We are not considering agency applications for this position. * We may use AI-based tools to support parts of the recruitment process, such as reviewing applications or resumes. These tools support our recruitment team but do not replace human decision-making, and all final hiring decisions are made by people. ## Related Videos - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [Beyond the Hype: Building Trustworthy and Reliable LLM Applications with Guardrails](https://www.wearedevelopers.com/videos/1594-beyond-the-hype-building-trustworthy-and-reliable-llm-applications-with-guardrails) - [Edit Your Future: Queerverse Radical AI](https://www.wearedevelopers.com/videos/909-edit-your-future-queerverse-radical-ai) - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [One Pipeline, Three Regulator - SBOM Compliance for the Developer](https://www.wearedevelopers.com/videos/100169-one-pipeline-three-regulator-sbom-compliance-for-the-developer) ## Related Articles - [Best Companies in the Netherlands: Top 25 Companies in 2023 ](https://www.wearedevelopers.com/magazine/193-best-companies-in-the-netherlands-top-25-companies-in-2023) - [How to land a developer job in Amsterdam](https://www.wearedevelopers.com/magazine/36-how-to-land-a-developer-job-in-amsterdam) - [The Netherlands – Europe’s powerhouse for software development?](https://www.wearedevelopers.com/magazine/31-the-netherlands-europe-s-powerhouse-for-software-development) - [How to Find Tech Jobs in Amsterdam](https://www.wearedevelopers.com/magazine/279-how-to-find-tech-jobs-in-amsterdam) - [Software Developer Salary in The Netherlands [2023]](https://www.wearedevelopers.com/magazine/217-software-developer-salary-in-the-netherlands-2023) - [The 12 Best Jobs for Software Engineers](https://www.wearedevelopers.com/magazine/401-the-12-best-jobs-for-software-engineers)