We're looking for a senior expert to build and maintain an Information Security Management System (ISMS), support ISO 27001 certification and meet requirements. You'll guide security partners, build security awareness and report risks and progress to the ICT director, working closely with the DPO.
What you'll do
- Maintain the ISMS, including policies, procedures, documentation and review cycles.
- Assess and supply-chain risks, maintaining the risk register.
- Prepare audits, maintaining the Statement of Applicability and supporting evidence.
- Coordinate security incidents under the Plan and reporting obligations.
- Oversee partners' , patching, monitoring and identity & .
- Support security aspects of business continuity and disaster recovery.
What you bring
- At least five years in , cybersecurity or ICT .
- Thorough knowledge of ISO 27001, and (CyFun).
- Experience with , audits, compliance and ISMS implementation or management.
- Understanding of infrastructure, cloud, identity services and security tooling.
- Knowledge of security operations, , supplier management and .
- An analytical, structured approach, turning complex security issues into practical actions.
- Ability to communicate with operational teams, management and directors.
- or equivalent relevant experience.
- , native.
- , B2.
Nice to have
- An ICT or business-related academic background.
- , , or ISO 27001 Lead Auditor certification.
- Experience in healthcare or protecting sensitive personal data.
Good to know
- A full-time or 80% schedule is possible.
What's next?
The people who do well here are the ones who saw themselves in this description. Not because they match every line, but because the mission felt right for them.
We are actively hiring for this position. Applications are reviewed by our team, and matching profiles receive a call to discuss the role in detail.
It takes under a minute to apply. Your email, your CV. That is all we need to start the conversation.