Information Security Consultant | SRC

• Strong basic knowledge and experience in the field of information security. 

• At least 2 years of experience in information security. 

• A completed HBO or WO degree, preferably with a focus on IT, Cyber Security, Security Management, or crisis management. 

• Certifications in the field of information security, such as CISM, ISO27001 Lead Implementer, CRISC, or CISSP, are a plus. 

• Fluent Dutch and good command of English. 

• You are a social, communicatively strong, representative, and proactive Security Consultant with the ability to effectively switch between the interests of different stakeholders. 

• You are curious and eager to learn, but also capable of independently developing and implementing robust security policies and procedures.  

• A permanent contract and a salary between €4,000 and €5,500 gross per month (based on 40 hours per week, employment at least 32 hours). 

• At Sopra Steria, we believe equal pay for equal work is important. Therefore, we determine your salary based on objective criteria such as experience, knowledge, competencies, and responsibilities. This is how we ensure fair and transparent compensation that matches your background and the impact of your role. 

• Holiday allowance of 8%; 

• A profit-sharing scheme with a target payment of 8% of the gross (part-time) annual salary, depending on company results; 

• A mobility scheme with the choice of an electric lease car or an alternative transport scheme, suited to your situation; 

• 27 vacation days, with the possibility to buy or sell extra-legal vacation days; 

• Flexible hybrid working conditions: at home, at the office, or at the client, depending on the role and the possibilities within assignments; 

• A home office package including a laptop, phone, and a monthly internet allowance; 

• Plenty of opportunities for professional and personal development through training, certifications, knowledge sessions, and inspiring events; 

• Various social activities with colleagues, from informal drinks to sporty and substantive events; 

• Opportunities for tax-friendly repayment of your student debt; 

• An extensive range of benefits via our cafeteria model, including a bicycle scheme, sports subscriptions, solar panels, and collective insurance; 

• A pension scheme with an employer contribution and the possibility to realize voluntary additional pension accrual. 
   

A positive future for everyone, that is what we work towards at Sopra Steria. With more than 51,000 colleagues in 30 countries, we are Europe's leading provider of digital solutions. We know better than anyone that it is not just technology that drives transformation. It is people who form the core of change. That is why people are central to everything we do, and we offer a supportive and inclusive environment where everyone can excel both individually and in a team. 

The world is how we shape it. Let’s shape it together.

Do you want to help organizations gain control over information security and ensure that security is not just correct on paper, but also truly works in practice? 

Within the Strategy, Risk & Compliance (SRC) practice of Sopra Steria, you will work together with experienced security professionals on complex and impactful issues for leading organizations within the public sector, financial services, industry & transport, and defense & security. You will join a growing practice where there is plenty of room to further expand your expertise, share knowledge, and continue to develop yourself as a security professional. 
 
What will you do? 
As an Information Security Consultant SRC, you help organizations to gain structured and demonstrable control over information security, risks, and compliance. You advise on security governance, information security policy, risk management, and strategic choices, taking into account relevant laws and regulations and standard frameworks, such as ISO 27001/27002, NIS2, the Cybersecurity Act (Cbw), BIO2, DORA, and the GDPR. 

You map out risks and areas for improvement and translate these into concrete measures that work in practice. In doing so, you liaise with various stakeholders within the client organization and combine your security knowledge with strong advisory skills. 

• Translating laws and regulations into practice 
  You advise clients on, among other things, laws and regulations and standard frameworks, such as ISO 27001/27002, NIS2, the Cybersecurity Act (Cbw), BIO2, DORA, and the GDPR, and translate requirements into policies, processes, and concrete measures.  

• Making risks and maturity visible 
  You perform risk analyses, maturity assessments, and gap analyses and translate the results into concrete improvement measures and advice. 

• Strengthening security governance, compliance, and continuity 
  You advise on security governance, compliance, and Business Continuity Management (BCM). You support audits, guide improvement processes, and help organizations in documenting processes, roles, and responsibilities. 

• Increasing Security Awareness 
  You help organizations to structurally strengthen security, for example by making employees more aware of information security through awareness programs, training, and awareness campaigns. 

• Implementing ISO 27001 
  You help organizations in setting up, improving, and implementing an Information Security Management System (ISMS) and guide them towards ISO 27001 certification.