Technical Information Security Officer

MSIG EuropeAmstelveenHybridFull-time29 Sept 2026

MSIG Europe SE is seeking a Technical Information Security Officer for its 2nd line Information Security team, based in Amstelveen with a hybrid work model. The role involves assessing security controls, advising on risk mitigation, and ensuring compliance with regulations such as GDPR, DORA, ISO 27001, and NIST. Candidates should have 5-8 years of information security experience, strong technical knowledge, and preferably certifications like CISSP or CISM.

What you'll do

Support assessing and challenging effectiveness of security controls, giving assurance on compliance with cybersecurity policies, and advising on risk mitigation strategies to protect organizational assets
Work alongside the other information security officers to review and challenge the design and implementation of security controls by the first line (e.g. Application management, Platform management) and evaluate technical risk assessments and ensure alignment with the organization’s risk appetite.
Work alongside the other information security officers to provide expert input on secure system design, cloud security, and emerging technologies and advise on secure development practices and DevSecOps integration.
Monitor cybersecurity key risk indicators (KRIs) and key performance indicators (KPIs), escalating concerns where necessary.
Review control testing results and provide independent validation of control effectiveness.
Recommend improvements to technical controls based on threat intelligence and incident trends.
Interpret and apply regulatory requirements (e.g., GDPR, DORA, ISO 27001, NIST) to technical environments.
Review major security incidents and post-incident reports to ensure root causes are addressed and remedial actions are owned by first line.
Support second-line input into incident response planning and tabletop exercises.
Promote a culture of security through awareness campaigns and technical training.
Mentor first-line teams on secure practices and risk-based decision-making.

What you need

Must-have

Cybersecurity principlesRisk managementComplianceISO 27001NISTSolvency IIDORAGDPR

Nice-to-have

CISSPCISMCCSKAZ-500DutchGermanFrench

Soft skills

CommunicationCollaborationProblem-solvingMentoringInitiativeAdaptability

Information SecurityInsuranceHybridFull-timeAmstelveenNetherlandsCybersecurityRisk ManagementComplianceAzure

/What you'll do

/What you need

Must-have

Nice-to-have

Soft skills

What you'll do

What you need