Information Privacy & Security Officer

Information is one of the most important assets of our organization. Therefore, VolkerRail is looking for an Information Security & Privacy Officer (ISPO) to provide direction to our information security and privacy, thereby making our organization a little safer every day.

As Information Security & Privacy Officer, you are responsible for the effective functioning and the further development of our Information Security Management System (ISMS) according to the ISO 27001 standard. Continuous improvement is central to your activities.

You advise management and process owners on information security, privacy, and risk management. With your expertise, you realize improvement initiatives, increase awareness regarding working safely with information, and help embed information security and privacy into daily operations. In doing so, you contribute to a secure and future-proof organization.

A glimpse of your tasks and responsibilities:

• You manage and improve the Information Security Management System (ISMS) in accordance with ISO 27001;

• You guide risk analyses and help process owners with the implementation of appropriate control measures;

• You translate risk analyses, audits, and incidents into concrete improvement actions and monitor progress;

• You advise colleagues, management, and process owners on information security, privacy, and compliance;

• You develop and update policies, guidelines, and procedures in the field of security and privacy;

• You increase security and privacy awareness through training, communication, and practical support.

You understand that information security is not just about technology or regulation, but above all about collaboration, risk awareness, and continuous improvement. You are someone who maintains an overview and provides structure. You are analytical, strong in communication, and are able to enthusiast colleagues and guide changes in a pragmatic manner.

In addition, you possess:

• A completed HBO or WO degree, preferably in the field of Computer Science, Cyber Security, Information Management, or similar;

• Several years of experience in the field of information security, governance, risk & compliance, or privacy;

• Demonstrable knowledge of ISO 27001 and the setup of an Information Security Management System;

• Knowledge of risk management and relevant laws and regulations, including the GDPR. Knowledge of NIS2 is a plus;

• Experience with guiding improvement processes and collaborating with various stakeholders.