Senior Information Security Officer (ISO)

• Minimum 5 years of experience in an information security role, for example as an Information Security Officer, security officer, advisor or similar;

• Experience within the healthcare sector or within similar sectors such as (semi-)government and/or financial services

• Experience with drafting, implementing, and maintaining information security policies and procedures;

• Basic to good knowledge of relevant standards and frameworks, such as ISO 27001 and/or NEN 7510, 7512, 7513;

• Experience with performing risk analyses and supporting audits and certification processes;

• Relevant education or certifications in the field of information security are a plus.

At Beter Healthcare, you will enter a work environment centered on growth, trust, and collaboration. You can count on:

• A good salary that we determine based on your knowledge and experience;

• Strong secondary benefits, such as a lease car, bonus scheme, pension, and of course a laptop and phone;

• Varied assignments at different healthcare organizations in the Netherlands;

• Knowledge groups, intervision, and development opportunities to continue learning continuously;

• Interactive quarterly meetings with colleagues at inspiring locations where engagement is central;

• An expert team of healthcare consultants who are always ready to think along with you;

• Space to spar with other recently started colleagues within the onboarding team;

• An active staff association for those who enjoy doing things together.

Do you want to help healthcare organizations bring information security into order in a structural and practical way? Do you enjoy working at the intersection of IT, processes, and daily practice, and do you find it important that information security is not just a standard, but is actually applied? Then this role as an Information Security Officer (ISO) is for you.

As an ISO, you are responsible for operationally monitoring and improving information security for Beter Healthcare's clients. You translate risks and security measures into concrete actions and ensure they are effectively applied. You work closely with IT, privacy, management, and the business to anchor information security integrally into daily practice.

You move comfortably between analysis and execution: from risk assessments and policy to supporting audits and increasing awareness within the organization. You are a substantive point of contact for information security and know how to maintain an overview in a dynamic environment.

• Performing risk analyses and translating risks into appropriate control measures;

• Supporting audits and certification processes (for example ISO 27001 and/or NEN standards);

• Monitoring compliance with information security measures and reporting on this to the CISO;

• Increasing security awareness within the organization, including through information and knowledge sharing;

• Advising and supporting teams with practical information security issues.

Every assignment is different, which requires flexibility and curiosity. You will work at various client locations throughout the Netherlands, sometimes from home, and sometimes at one of our office locations. You will be given the space to organize your work in a way that suits both you and the organization.

You are an information security professional with several years of experience, who knows their craft well and wants to deepen it further. You work in a structured and careful manner and have a clear focus on quality. You find it important that policies, procedures, and measures are not only correctly recorded, but are also practically applicable and align with the organization.

You have good insight into processes and information flows and understand how risks arise within an organization. You analyze these risks carefully and, together with colleagues and stakeholders, know how to translate them into appropriate and realistic measures. In doing so, you know how to distinguish between main and secondary matters and maintain an overview, even when multiple topics are playing out simultaneously.

You are open to innovation and actively think along about improvements. With your innovative capacity, you look for ways to design information security more smartly, effectively, and future-proof, fitting the context and maturity of the organization.

Additionally, you derive energy from sharing knowledge. You understand that information security only truly works when colleagues know what is expected of them and why that is important. You know how to convey complex subject matter clearly and understandably and actively contribute to increasing security awareness within the organization.

In collaboration, you are accessible and professional. You communicate clearly, substantiate your advice, and know when you can act independently and when coordination or escalation is required.

Experience & expertise