Helping organizations gain control over information security and ensuring that security works in practice, not just on paper, is the core of this role. You will work with experienced security professionals on complex and impactful issues for leading organizations across various sectors, contributing to a growing practice where you can expand your expertise and develop as a security professional.
Responsibilities
Help organizations gain structured and demonstrable control over information security, risks, and compliance
Advise on security governance, information security policy, risk management, and strategic choices, considering relevant laws and regulations and frameworks such as ISO 27001/27002, NIS2, the Cyber Security Act (Cbw), BIO2, DORA, and GDPR
Identify risks and areas for improvement and translate them into concrete measures that work in practice
Liaise with various stakeholders within the client organization and combine security knowledge with strong advisory skills
Translate laws and regulations into practice, advising clients on frameworks like ISO 27001/27002, NIS2, the Cyber Security Act (Cbw), BIO2, DORA, and GDPR, and translating requirements into policies, processes, and concrete measures
Conduct risk analyses, maturity assessments, and gap analyses, translating results into concrete improvement measures and advice
Advise on security governance, compliance, and Business Continuity Management (BCM)
Support audits, guide improvement processes, and help organizations define processes, roles, and responsibilities
Help organizations strengthen security structurally, for example, by making employees more aware of information security through awareness programs, training, and campaigns
Assist organizations in setting up, improving, and implementing an Information Security Management System (ISMS) and guide them towards ISO 27001 certification
Requirements
Strong basic knowledge and experience in information security
Minimum of 2 years of experience in information security
Completed HBO or university education, preferably with a focus on IT, Cyber Security, Security Management, or crisis management
Social, communicatively strong, presentable, and proactive Security Consultant with the ability to effectively switch between the interests of different stakeholders
Curious and eager to learn, but also able to independently develop and implement robust security policies and procedures
Fluent in Dutch and good command of English
Nice to have:
Certifications in information security, such as CISM, ISO27001 Lead Implementer, CRISC, or CISSP
Benefits
Fixed contract
Millions of jobs, with real people getting hired every day
200,000+
New jobs added daily
7,000,000+
Verified job listings
1,000,000+
Tailored applications submitted
8% holiday pay
Profit-sharing scheme with a target payout of 8% of the gross (part-time) annual salary, depending on company results
Mobility scheme with a choice of an electric lease car or an alternative transport arrangement, suitable for your situation
27 vacation days, with the option to buy or sell additional statutory vacation days
Flexible hybrid working conditions: at home, in the office, or at the client, depending on the function and assignment possibilities
Home working package with laptop, phone, and a monthly internet allowance
Ample opportunities for professional and personal development through training, certifications, knowledge sessions, and inspiring events
Various social activities with colleagues, from informal drinks to sports and substantive events
Possibilities for tax-friendly repayment of study debt
Extensive range of benefits via the cafeteria model, including a bicycle scheme, sports subscriptions, solar panels, and collective insurance
Pension scheme with an employer contribution and the option to voluntarily realize additional pension accrual
Important Details
Schedule: minimum 32 hours per week, based on 40 hours per week
About the Company
Sopra Steria works towards a positive future for everyone. With more than 51,000 colleagues in 30 countries, it is Europe's leading provider of digital solutions. The company believes that people are at the core of change and offers a supportive and inclusive environment where everyone can excel individually and as a team. Within the Cyber Security Area, the company works from different disciplines, from Strategy, Risk and Compliance and Identity & Access Management to Offensive and Defensive Security. The work has a significant societal impact, contributing to the digital resilience and continuity of society.
Sopra Steria, a major Tech player in Europe with 51,000 employees in nearly 30 countries, is recognised for its consulting, digital services and solutions.
