Information Security Officer
Posted 6 days 9 hours ago by Alium
Information Security Officer (ISO) Leading Life Sciences & Healthcare Organization
Are you passionate about protecting sensitive information and fostering a culture of security? We're looking for an experienced Information Security Officer to join a forward-thinking Quality, Risk & Compliance (QRC) department within a dynamic and mission-driven organization at the heart of the life sciences and healthcare sector.
About the Role
As an Information Security Officer, you'll be responsible for shaping and executing the organization's information security strategy. You'll manage and enhance the Information Security Management System (ISMS) and ensure compliance with critical standards like ISO 27001 and NEN 7510.
This is a key position working across departments-from IT to internal audit to executive leadership-ensuring that information remains secure, available, and reliable. You'll also guide risk assessments, manage incident response, and influence security thinking in projects and organizational change.
About the Organization
You'll be joining a purpose-driven organization that makes a measurable impact in public health through scientific innovation, diagnostics, and critical service delivery. Within the QRC function, you'll work alongside professionals in areas such as audit, risk management, regulatory compliance, and operational improvement-all committed to excellence, safety, and continuous improvement.
This is a unique opportunity to work in a complex, regulated, and meaningful environment where your expertise will directly support the protection of vital services and data.
What You'll Do
- Develop and implement robust information security policies
- Maintain and continuously improve the ISMS
- Ensure compliance with relevant standards (ISO 27001, NEN 7510)
- Conduct risk assessments and oversee incident management
- Provide expert guidance on information security in strategy and change
- Deliver training and awareness sessions to build a security-first culture
What You Bring
- A completed higher professional (HBO) or university (WO) degree in a relevant field such as computer science, business administration, or information security
- At least 5 years of experience in a similar role within a complex, regulated environment
- Strong knowledge of ISO 27001 and NEN 7510
- Relevant certifications such as CISM, CISSP, or CISA (preferred)
- Experience with risk management, ISMS, and awareness programs
- Excellent communication skills in Dutch and English, with the ability to bridge policy and practice