Information Security Officer

As Information Security Officer you combine business expertise and cybersecurity, ensuring security for our systems aligned with workability to be able to meet organizational goals. Key responsibilities include identifying and assessing risks based on the PostNL Cyber Risk Management process and advice PostNL teams on the implementation of tailored security controls and mechanisms. You will manage security risks by identifying potential security vulnerabilities that may affect operations and mitigate them with both business and IT stakeholders. You drive collaboration between business IT teams and cybersecurity teams/professionals, in order to safeguard data and critical assets.

Uitdagingen

The Data & Applications team is part of the PostNL Cyber Security Office (CSO). We serve as a second line department and are in close contact with many other teams inside PostNL (e.g. IT teams of the PostNL business units, Privacy Office, Head Office IT and Data Foundations). The team creates company-wide security policies, tests security measures and advises on projects and IT security-related topics. You will shape the implementation of the policy in direct cooperation with the stakeholders inside and outside the IT domain. The main purpose of the role is to protect the organization from harm due to breach of security of corporate and/or customer data.

As Information Security Officer you combine business expertise and Cybersecurity, ensuring security for our systems aligned with workability to be able to meet organizational goals. Key responsibilities include identifying and assessing risks based on the PostNL Cyber Risk Management process and advice PostNL teams on the implementation of tailored security controls and mechanisms. You will manage security risks by identifying potential security vulnerabilities that may affect operations and mitigate them with both business and IT stakeholders. You drive collaboration between business IT teams and cybersecurity teams/professionals, in order to safeguard data and critical assets.

You are a passionate promoter of the need for information security and advise management on related issues. You assist our stakeholders by making concrete and to-the-point recommendations in order to take PostNL to the next level. It is vital that there is a balance between a secure and reliable, but also workable IT environment.

Je verantwoordelijkheden

• Visibility: You work as a security specialist and ensure that the IT teams can develop the IT systems in a secure and workable manner. Security is crucial for PostNL and is high on the agenda of (IT) board members. The work is important for PostNL and gives you great visibility.
• Challenge: You are a passionate promoter of the need for information security controls and mechanisms towards PostNL IT teams. You advise management on the current state of the IT landscape in terms of IT Security. In addition, you work with various IT teams at PostNL to increase the Security level of their systems in a workable way.
• Good atmosphere: You work together with colleagues who dare to seize opportunities and help each other move forward.
• Freedom: You will work hybrid, both from home and from our vibrant, state-of-the-art office in the historic Stationspost building (next to Holland Spoor station).
• Responsibility: You’ll be a promoter and knowledge holder of Cybersecurity within PostNL, and therefore take responsibility to help our IT teams to improve the security level of their systems.
• Development opportunities: You will have plenty of opportunities to follow training programs and grow into other positions or departments.
  
  

Wat breng jij mee?

Skills

As Information Security Officer you combine business expertise and cybersecurity, ensuring security for our IT solutions aligned with workability to be able to meet organizational goals. Your passion for making a meaningful impact by improving security measures and controls drives you. You drive collaboration between cybersecurity teams/professionals and the rest of the organization, in order to safeguard data and critical assets. Good communication skills are important as you will be a promoter and sparring partner. You feel comfortable presenting to and advising management on security related matters. In addition to this:

• You have a bachelor/master degree in a relevant field, such as business administration or computer science.
• You have 2-3 years' experience with organizations working in a cloud environment and have knowledge of (cybersecurity) risk management.
• You have demonstrable knowledge of ISO27001, audit reporting and NIST/CSF/CIS.
• You have demonstrable knowledge of NIS-2 and GDPR legislation.
• Having obtained security certifications such as CISSP, CCSP, CISM, CISA or CRISC is considered a plus.
• Excellent English written and verbal communication skills. Proficiency in Dutch language is considered a plus.
  
  

Wat bezorgen we jou?

Benefits

We support our people with a motivating work environment and enthusiastic colleagues, a commitment to promoting from within and a belief that every employee deserves a productive life outside of work. This position is a rewarding opportunity that allows you to develop professionally while working in a department that offers recognition for those who perform. The benefits of this position are:

• This position is on scale 11 (between € 4.588,- and € 6498,- a month), depending on your level of experience.
• Our full-time working week is 37 hours.
• 8% holiday pay and 25 holiday days if you work full-time.
• You can use flexible working hours to determine an optimal work / life balance. We place great value on your vitality.
• Hybrid way of working, enabling you to partly work from home and from our brand new head office, just in 5 minutes’ walk from station Den Haag – Hollands Spoor.
• At PostNL, you can use an NS Business Card for business travel and commuting.
• Collective health insurance and good pension through our own PostNL pension fund.
• Good internal training and development opportunities.