Overview
In this role you will lead PwC NL’s CISO office on governance, risk and compliance across a complex regulatory landscape. You will translate global security policy into practical standards, working with auditors, business teams and technology to embed security into day-to-day operations. You’ll drive strategic programs around resilience, regulatory readiness and AI governance, with a clear focus on risk assessment and control maturity. This is a visible, impactful position at a top professional services firm that shapes how security is managed across the organization.
Arbeidsvoorwaarden / Benefits
- competitive salary
- annual bonus
- permanent contract
- tailor-made training programs
- flexible mobility options
- 32 vacation days with purchase option for extra leave","personal well-being budget and OpenUp platform","hybrid working with home office setup and internet stipend"],
Verantwoordelijkheden
- Lead internal PwC control framework and act as SME for internal audit, including preparation, evidence testing, remediation tracking, and control maturity improvement
- Oversee ISO 27001, SOC 2, NIS2 and DORA implementations and maintain the CISO office pillar of the internal IT Unified Control Framework
- Lead annual security risk assessment and manage security awareness campaigns
- Define and oversee PwC NL's AI governance and risk management, including policy development and oversight of responsible use
- Collaborate with committees and service lines to ensure security, risk and control requirements are understood and embedded across the business
Belangrijkste vereisten
- 5+ years in information security, IT governance, compliance, risk management and internal control
- Hands-on experience implementing and maintaining ISO 27001, SOC 2 and NIS2
- Security project management experience a strong plus
- Solid understanding of internal audit processes, control testing, issue remediation and evidence collection for regulators
- Knowledge of AI governance and AI risk; hands-on IT or cybersecurity experience is an advantage
- Fluent in Dutch at professional level
- proactive
- structured
- consultative
- ISO 27001 implementation
- SOC 2 implementation
- NIS2 implementation
Business Information Security Officer (BISO) in Amsterdam werkgever: Jobrapido
StarPark is een uitstekende werkgever die je de kans biedt om te werken op diverse evenementen en festivals, waar je in een informele en prettige werksfeer kunt bijdragen aan de veiligheid van bezoekers. Met flexibele werkmogelijkheden en goede begeleiding vanuit het team, stimuleert StarPark persoonlijke groei en ontwikkeling, waardoor je niet alleen waardevolle ervaring opdoet, maar ook de mogelijkheid hebt om door te groeien binnen de organisatie. Wij verwelkomen iedereen, ongeacht achtergrond, en geloven dat jouw talent het belangrijkste is.
