Business Information Security Officer (BISO)

PwC NederlandAmsterdamHybridFull-time1 Oct 2026

PwC Netherlands is seeking a Business Information Security Officer (BISO) to lead security governance, risk, and compliance within the CISO office. The role involves implementing frameworks like ISO 27001, SOC 2, NIS2, and DORA, driving AI governance, and managing annual security risk assessments. Requires 5+ years of experience in information security, IT governance, and compliance, plus fluency in Dutch.

What you'll do

Lead the CISO office's work on the internal PwC control framework and act as SME for internal audit, including preparation, evidence testing, remediation tracking, and control maturity improvement.
Drive the implementation, upkeep, and continuous improvement of ISO 27001, SOC 2, NIS2, and DORA, and manage the CISO office pillar of PwC NL's internal IT Unified Control Framework.
Lead the global and local annual security risk assessment and manage PwC NL's security awareness campaigns.
Implement and maintain the firm's approach to AI governance and risk management, including policy development, risk assessment, control definition, and oversight of responsible use.
Partner with internal committees and lines of service to ensure security, risk, and control requirements are understood, workable, and embedded across the business.

What you need

Must-have

ISO 27001SOC 2NIS2DORAAI governanceAI riskIT governancecompliance

Nice-to-have

ITcybersecurity

Soft skills

proactivestructuredconsultativehands-oncommunicationcollaboration

BISOInformation SecurityGovernanceRiskComplianceISO 27001SOC 2NIS2DORAAI Governance

/What you'll do

/What you need

Must-have

Nice-to-have

Soft skills

What you'll do

What you need