Information Security Consultant - SRC

About This Role

Helping organizations gain control over information security and ensuring that security works in practice, not just on paper, is the core of this role. You will work with experienced security professionals on complex and impactful issues for leading organizations across various sectors, contributing to a growing practice where you can expand your expertise and develop as a security professional.

Responsibilities

• Help organizations gain structured and demonstrable control over information security, risks, and compliance
• Advise on security governance, information security policy, risk management, and strategic choices, considering relevant laws and regulations and frameworks such as ISO 27001/27002, NIS2, the Cyber Security Act (Cbw), BIO2, DORA, and GDPR
• Identify risks and areas for improvement and translate them into concrete measures that work in practice
• Liaise with various stakeholders within the client organization and combine security knowledge with strong advisory skills
• Translate laws and regulations into practice, advising clients on frameworks like ISO 27001/27002, NIS2, the Cyber Security Act (Cbw), BIO2, DORA, and GDPR, and translating requirements into policies, processes, and concrete measures
• Conduct risk analyses, maturity assessments, and gap analyses, translating results into concrete improvement measures and advice
• Advise on security governance, compliance, and Business Continuity Management (BCM)
• Support audits, guide improvement processes, and help organizations define processes, roles, and responsibilities
• Help organizations strengthen security structurally, for example, by making employees more aware of information security through awareness programs, training, and campaigns
• Assist organizations in setting up, improving, and implementing an Information Security Management System (ISMS) and guide them towards ISO 27001 certification

Requirements

• Strong basic knowledge and experience in information security
• Minimum of 2 years of experience in information security
• Completed HBO or university education, preferably with a focus on IT, Cyber Security, Security Management, or crisis management
• Social, communicatively strong, presentable, and proactive Security Consultant with the ability to effectively switch between the interests of different stakeholders
• Curious and eager to learn, but also able to independently develop and implement robust security policies and procedures
• Fluent in Dutch and good command of English

Nice to have:

• Certifications in information security, such as CISM, ISO27001 Lead Implementer, CRISC, or CISSP

Benefits

• Fixed contract
• 8% holiday pay
• Profit-sharing scheme with a target payout of 8% of the gross (part-time) annual salary, depending on company results
• Mobility scheme with a choice of an electric lease car or an alternative transport arrangement, suitable for your situation
• 27 vacation days, with the option to buy or sell additional statutory vacation days
• Flexible hybrid working conditions: at home, in the office, or at the client, depending on the function and assignment possibilities
• Home working package with laptop, phone, and a monthly internet allowance
• Ample opportunities for professional and personal development through training, certifications, knowledge sessions, and inspiring events
• Various social activities with colleagues, from informal drinks to sports and substantive events
• Possibilities for tax-friendly repayment of study debt
• Extensive range of benefits via the cafeteria model, including a bicycle scheme, sports subscriptions, solar panels, and collective insurance
• Pension scheme with an employer contribution and the option to voluntarily realize additional pension accrual

Important Details

• Schedule: minimum 32 hours per week, based on 40 hours per week

About the Company

Sopra Steria works towards a positive future for everyone. With more than 51,000 colleagues in 30 countries, it is Europe's leading provider of digital solutions. The company believes that people are at the core of change and offers a supportive and inclusive environment where everyone can excel individually and as a team. Within the Cyber Security Area, the company works from different disciplines, from Strategy, Risk and Compliance and Identity & Access Management to Offensive and Defensive Security. The work has a significant societal impact, contributing to the digital resilience and continuity of society.