Information Security Officer

HTM has the ambition to remain the best urban transport provider in the Netherlands. To realize that ambition, HTM must fully capitalize on the opportunities and risks of digitalization. Do you want to make an impact on an organization in the midst of digital acceleration? Then apply for this key role within HTM.

As an Information Security Officer, you are a driving force behind the development, implementation, and monitoring of the information security policy and the underlying standards. You analyze threats and risks to information provision and, together with your internal client, translate these into supported and practical solutions that actually reduce risks.

The Information Security Officer is part of the CISO team within the CIO Office. This team carries out HTM-wide direction for information security: towards all HTM departments and towards external parties that process HTM information. The focus lies on developing information security policies that align with relevant quality standards and laws and regulations, and translating these into concrete standards, procedures, and guidelines.

The CISO team directs implementation via process and system owners, under the direction of the Information Security steering group at the executive team level. The safety and continuity of public transport in the region make information security a strategic theme with great social impact.

Our ISO27001:2022 documentation forms an important foundation. Additionally, HTM falls under the category of important organizations within NIS2, making knowledge of the implementation requirements of this legislation essential.

You advise management and the CIO on risks, measures, and compliance, and support audits and implementations. Working from the CIO Office, you are close to decision-making and report functionally to the CISO and hierarchically to the Manager CIO Office.

Your tasks include:

• ISMS management: maintaining the ISMS, including the agile information security plan, internal audits, the internal control plan, and the further development of standards.

• Periodic reporting for information security.

• Business Impact Assessments and risk analyses.

• Baseline ‑advice on measures such as Identity & Access Management and Logging & Monitoring.

• Audit coordination and follow-up of findings.

• Developing awareness ‑programs and providing training.

• Risk signaling to the Information Security steering group.

We are looking for an experienced security professional with a solid foundation in both IT and governance. You are analytical, connecting, and strategically minded, and you know how to translate complex issues into clear frameworks and concrete solutions.

Furthermore, we are looking for someone who:

• Is communicatively strong and can advise persuasively

• Is politically sensitive and can weigh interests well

• Works proactively and acts result-oriented

• Is team-oriented, with coaching and inspiring qualities

• Remains flexible in a dynamic, changing environment

• Is driven to continuously improve and stimulates innovation

• Has at least 5 years of experience in a similar role  (University level thinking and working, preferably in Information Security, IT, or information management)

• Certifications such as CISSP, CISM, CIPP/E, or CIPM are a plus  

• Knowledge of ISO27001/27002, BIO, NIST, AVG, and NIS2  

• Experience with risk analyses, compliance, and governance  

• Knowledge of Cloud, SaaS, networks, and DevOps environments  

• Excellent written and oral skills in Dutch and English  

We offer you a challenging and independent position in an informal working environment where innovation, quality, safety, and efficiency are increasingly in the foreground.
The position is rewarded in salary group 12 of the HTM collective labor agreement (cao) with a corresponding salary between € 6,115 and € 8,496 for full-time employment. You can find our excellent primary and secondary employment conditions on our website: bij HTM zit je goed. 

You can easily apply by sharing your LinkedIn profile with us. Uploading a CV is not necessary.

During the selection procedure, we ask you to provide your diploma. We verify this as part of the application process.

Do you have substantive questions? Please contact Larik van der Laan (Manager CIO Office)
📞 +31627621229

📧 l.vd.laan@htm.nl

Questions regarding the procedure, please contact Kim Jillissen (Recruiter) 
📞 +31 6 21 39 07 75

📧 k.jillissen@htm.nl