Information Security Officer

NicolabAmsterdamOn-siteFull-time4 days ago

Information Security Officer needed to strengthen and maintain Nicolab's Information Security Management System according to ISO 27001. Requires 3+ years of experience in information security, data protection, IT or software development, and knowledge of ISO 27001. Based on-site in Amsterdam, Netherlands.

What you'll do

Assume overall responsibility for the design, implementation, monitoring and governance of Nicolab's information security framework according to ISO 27001:2022 and other applicable standards and regulations.
Host bi-weekly Information Security Committee meeting and discuss all security aspects related to product and company with representatives from various parts of the organization.
Maintain and build a proactive, security-responsible culture at Nicolab by communicating and training personnel to propagate cyber security policies, procedures and practices throughout the organization.
Plan, manage, execute and follow up on all control checks defined by Annex A of ISO 27001 to ensure the correct implementation of defined processes.
Organize and conduct internal audits to assess continued compliance to ISO 27001 (and NEN 7510) and host external audits for surveillance and recertification audits for ISO 27001 (and NEN 7510).
Manage Nicolab's Information security risk management file.
Consult Nicolab's software developers to create safe and secure solutions for medical device products and deployments.
Oversee and organize Nicolab's vulnerability management including vulnerability scans, penetration testing and related follow-up actions.
Communicate to customer's data protection personnel by aligning on data protection and cyber security requirements.
Prepare security related documentation to support sales, marketing and other activities in the company.
Manage various (critical) IT systems including services, contracts, renewals and user onboarding.
Manage and service user endpoint maintenance and protection.
Manage and service office IT infrastructure.

What you need

Must-have

ISO 27001NEN 7510ISO 13485ISO 14973GDPRHIPAAInformation SecurityData Protection

Nice-to-have

Additional languages

Soft skills

CommunicationOwnershipProactiveAdaptabilityInnovativeStart-up mindset

Information SecurityISO 27001Medical DevicesHealthcareData ProtectionCyber SecurityComplianceAmsterdamOn-site

/What you'll do

/What you need

Must-have

Nice-to-have

Soft skills

What you'll do

What you need