Information Security Advisor (Governance Risk and Compliance)

KPMG NederlandAmstelveenHybridFull-time29 Sept 2026

KPMG is seeking an Information Security Advisor in Amstelveen to lead risk assessments, strengthen cloud and AI governance, and drive compliance. The role requires experience with security frameworks, risk assessments, and strong English and Dutch communication skills.

What you'll do

Lead information security risk assessments for applications, infrastructure and third-party suppliers.
Advise product owners and stakeholders on security controls, risk mitigation and compliance requirements.
Review and improve information security policies, standards and control frameworks.
Coordinate internal and external audit activities and support the timely resolution of findings.
Evaluate security exceptions and monitor the effectiveness of implemented controls.
Partner with application owners, project teams and suppliers to identify vulnerabilities and make informed decisions.
Contribute to audit preparation and remediation activities.
Support continuous improvement initiatives across the organisation.

What you need

Must-have

ISO 27001NISTSOC 2Information SecurityIT Risk AssessmentsCloud SecurityAI GovernanceCompliance

Nice-to-have

CISSPCISMCISASupplier Security AssessmentsThird-Party Risk ManagementData PrivacyCloud Security

Soft skills

Stakeholder ManagementCommunicationProblem SolvingCritical Thinking

Information SecurityGovernance Risk and ComplianceFinancial ServicesKPMGAmstelveenHybridFull-timeISO 27001NISTCloud Security

/What you'll do

/What you need

Must-have

Nice-to-have

Soft skills

What you'll do

What you need