Senior Technical Information Security Officer
NN Group IT / Enterprise Engineering Technology is looking for an Information Security Officer who is able to take a proactive role in the management of information security risks. The ideal candidate has a strong foundation in IT security and compliance practices, is well versed in relevant industry standards, and actively contributes to the adoption, improvement, and effective implementation of security processes, and controls. You take ownership, work independently where needed, and collaborate closely with stakeholders to embed security into daily operations.
You are committed to staying current with emerging security trends, threats, and regulatory developments, and you are able to identify opportunities for new initiatives that further enhance the organization’s security maturity and resilience.
What you are going to do
Within our organization, all business units are responsible for safeguarding the security of the IT environment. A key challenge for the BSO team is to review, validate, and ensure the correct implementation of technical security measures, while actively supporting DevOps teams in achieving this.
The BSO team plays a critical role in balancing residual risks against required security controls, enabling product owners and their teams to make well-informed, risk-based decisions. Continuous improvement of IT security processes and procedures through standardization and automation is essential for increasing quality, reducing manual effort, and enhancing consistency across the organization. As a member of the BSO Team, your role is to review and support the implementation of security standards and guidelines, ensuring a structured, consistent, and well-aligned approach to IT security and compliance.
- Reviewing technical designs and security measures (e.g., IAM, firewalls, according NN security standards) for the designs of the technical environment: network, infrastructure (both cloud and on-premise datacenters), SaaS, external connections etc
- Working with team of information security officers on a wide variety of security and compliance tasks, e.g. periodic control tracking, deep-dive product reviews, threat modelling, vulnerability assessments and supply chain security, etc
- Working in close cooperation with the DevOps infrastructure teams to proactively identify risks and support teams to implement the appropriate security measures
Who you will work with
The BSO EET team has been repositioned within Group IT. You will be joining a team (currently 7 team members) and working with enthusiastic colleagues who are divers in background, age and a variety of skills, with intensive daily interaction, cooperation and supporting each other on difficult topics. We are very keen on keeping our environment secure and safe, continuous learning by coaching on the job and by training and education. And very important: having a lot of fun in working together and time to spare for the occasional team drinks and other outings.
What we offer you
NN invests in an inclusive, inspiring work environment and in skills and competences for the future. We match this with employee benefits that are in line with what is needed today and in the future. This way, we offer our employees the opportunity to get the best out of themselves. We offer you:
- Salary between €5,933 and €7,910 based on 40 hours per week depending on your knowledge and experience
- 13th month and holiday allowance are paid with your monthly salary
- 27 vacation days for a 5-day working week and three Diversity Days
- A modern pension administered by BeFrank
- Plenty of training and learning opportunities
- NS Business Card 2nd class, which gives you unlimited travel, also privately. Do you prefer to travel with your own transport? Then you can declare the kilometers travelled
- Allowances for setting up your home office and for internet use
Who you are
- You are proactive and result-driven and ensure you meet agreements made
- You are concise and have an eye for detail, while keeping the overall picture and goal in mind
- You have a clear communication style, and know how to align with and report to higher management and your stakeholders. You know how to maneuvers in political environments
- You have hands-on experience with security and risk processes and procedures, so that you understand what impact changes to these processes and procedures can have on the organization
- You are strong on content, but understand organizational challenges and are able to move security forwards in a professional, pragmatic, and cooperative way of working
- You preferable have experience with modern engineering tools and infrastructure solutions, with a strong focus on automation
