Business Information Security Officer in the Netherlands

• € 5703 to 7912 gross per month (Scale 13).
• A 13th month.
• An iPhone.
• An allowance for working from home of € 3.00 net per day.

These are just a few of our employment conditions that apply to this position, based on a 36-hour work week. Schiphol has even more to offer you. For the full overview, go to Employment Conditions - Working at Schiphol.

• As a Business Information Security Officer (BISO), you advise Business Platform Infrastructure & IT Projects on cybersecurity issues within IT and Operational Technology (OT).
• You will be working in the cybersecurity team of Business Platform Infrastructure & IT Projects.
• We are going for it: Schiphol must belong to the top 3 of European airports.

As a Business Information Security Officer, you support product teams, IT/OT projects, and asset owners with advice on technical and governance issues. These issues arise, among other things, from new infrastructure and OT solutions, architectural designs, cloud and platform services, the implementation of security measures, and identified vulnerabilities. You translate Schiphol's cybersecurity policy into practical and actionable measures for digital infrastructure and operational assets, such as runway lighting, evacuation systems, and autonomous buses. How exactly you realize this? That is up to you. You will apply your talents to:

• proactively managing cybersecurity risks, vulnerabilities, and findings. You take initiative, mobilize the right parties, drive decision-making and measures, and actively monitor implementation and follow-up until risks are demonstrably controlled.
• supporting the implementation and improvement of technical security measures, including hardening at OS, cloud, network, middleware, and OT levels, and guiding firewall and infrastructure changes.
• monitoring the effectiveness of security measures, supporting risk owners with mitigating measures, and responding timely to new threats, vulnerabilities, and risks.
• supporting and coordinating security incidents in collaboration with CSIRT, suppliers, product teams, project teams, asset owners, and other relevant stakeholders.
• ensuring cybersecurity requirements from laws and regulations, policies, and standards within the full lifecycle of infrastructure services, platforms, OT assets, and IT/OT projects.
• actively contributing to IT/OT projects and change initiatives as a security representative, including security reviews, risk assessments, and advice during design and decision-making moments.
• preparing and assessing internal and external audits, including security assessments of suppliers, partners, and outsourced infrastructure, cloud, and OT services, and monitoring the follow-up of non-conformities and findings.

Information security within Schiphol is organized according to the Three Lines Model. As a BISO, you are part of the first line and support Business Platform Infrastructure & IT Projects in identifying, assessing, treating, and monitoring cybersecurity risks within IT and OT.
You work closely with product teams, project teams, asset owners, architects, suppliers, the Cyber Security Center (second line), Risk & Internal Audit, Legal, the Data Privacy Officer, and internal and external auditors (third line).

Schiphol connects your world. With the best people, we make travel safe and responsible. You connect technical specialists, asset owners, project teams, and decision-makers to collectively arrive at suitable solutions. You think critically, dare to ask questions, and have the drive to realize improvements. In any case, for this position, you have: