Security Officer

• A contract of 24 to 40 hours per week, flexibly distributed throughout the week in consultation.

• A salary between €3,500 and €4,500 gross per month based on 40 hours, depending on your experience. For 24-32 hours, we calculate this pro rata.

• Hybrid working: our office is in Groningen and we would like to see you there a few days a week. The rest, you work from home.

• 27.5 vacation days on a full-time basis.

• A good pension scheme and travel allowance.

• A personal training budget, for example for an ISO 27001 Lead Implementer, ISO 27001 Lead Auditor, or CISM.

• Short lines with management: no unnecessary layers between your advice and decision-making.

• Colleagues who take their work seriously and a working atmosphere in which having fun in your work is the norm.

• A working atmosphere in which professionalism, ownership, and enjoyment go well together.

Do you get energy from security that is demonstrably in order? From ISO 27001, NIS2, tight documentation, and processes that don't just exist, but actually work? Then we are looking for you.

At Payt, you will help to further professionalize our security approach: practical, and structured for customers, audits, and growth. Do you recognize yourself in this? Then read on!

As a Security Officer, you will get a role in which you can truly build. Not on a paper reality, but on a security approach that is correct, works, and is demonstrably in place when customers, auditors, or colleagues ask for it. You will help us keep ISO 27001 and NEN 7510 tightly organized and take an important role in the trajectory towards NIS2. In doing so, you translate standards, risks, and customer questions into practical processes, clear agreements, and documentation that people can actually use.

You work together with the security team, consisting of 10 colleagues, with IT, Legal, and management, but you are also close to the rest of the organization. One day you are sharpening a procedure, the next day you ensure that an action from an audit doesn't remain stuck at the bottom of a list.

We are looking for someone who gets energy from overview, structure, and progress. No endless policy documents for the sake of policy documents, but security that visibly contributes to trust in Payt.

For this role, we are looking for someone who enjoys it when documentation is correct, registers are up to date, and deadlines are checked off well before the audit. You work accurately, communicate easily with various colleagues, and ensure that things are not left half-done.

• You have a higher professional education (HBO) level of working and thinking, for example in computer science, business administration, IT management, security, or audit.

• You preferably, but not necessarily, have experience with information security, governance, risk & compliance, audit, or IT compliance.

• You preferably, but not necessarily, have experience with ISO 27001, for example as an ISO coordinator, internal auditor, compliance officer, or security officer.

• Experience with NEN 7510 or NIS2 is also a plus, but not a requirement.

• You write clearly and practically: in your view, policies and procedures must be usable, not just formally correct.

• You can switch easily between different conversation partners, from developers to management.

• You know when to ask follow-up questions, adjust course, or escalate.

• You work proactively and independently: you don't wait until an audit is in sight, but build a rhythm in which compliance remains continuously in order.

• You speak and write Dutch fluently and have a good command of English. Our documentation and customer contact take place in both languages.

• A certification such as ISO 27001 Lead Implementer, ISO 27001 Lead Auditor, CISM, or CISSP is a plus, but not a hard requirement. What we find more important is what you have built up in previous roles and how you approached it.

At Payt, you get a role in which you make a visible difference. You work on the security foundation of a growing SaaS company and get the space to truly set up processes, documentation, and compliance correctly.