Group Information Security Officer

TBAuctionsAmsterdamOn-siteFull-time3 weeks ago

Experienced Group Information Security Officer needed to design and implement group-wide security standards across auction brands and regions. Requires over 8 years in information security management, strong leadership, and expertise in risk assessment, incident response, and compliance (ISO 27001/2, GDPR, NIS2).

What you'll do

Own and continuously develop TBA’s information security strategy, policies, and standards across all regions and brands.
Act as the single point of accountability for information security, including cloud, application, infrastructure, and data security.
Lead risk assessments, threat modeling, and vulnerability management, maintain an up-to-date security risk register, and work in close cooperation with Product and Tech teams to ensure that network and data remain secure.
Own security incident response, including detection, escalation, communication, and post-incident reviews.
Help with future compliance, regulatory and standardization projects (e.g., ISO 27001/2, GDPR, NIS2).
Manage third-party and supplier security, including due diligence, ongoing reviews, and security clauses in contracts.
Drive security awareness and training across the organization.
Provide clear reporting to executive management, including risk posture, incidents, and remediation progress.

What you need

Must-have

Information SecurityRisk AssessmentThreat ModelingVulnerability ManagementSecurity Incident ResponseISO 27001ISO 27002GDPR

Soft skills

AnalyticalProblem-solvingCommunicationLeadershipManagementSelf-drivenCollaborationTrainingEducating

Information SecuritySecurity OfficerRisk ManagementComplianceISO 27001GDPRNIS2Incident ResponseCloud SecurityAmsterdam

/What you'll do

/What you need

Must-have

Soft skills

What you'll do

What you need