Security Officer

Do you combine a strong understanding of information security with a solid technical background? As a Technical Security Officer at Yenlo, you are responsible for safeguarding and improving information security across our organization and customer environments.

In this role, you ensure that security is not only defined, but also effectively implemented and embedded in practice, especially within our cloud and integration landscape. You act as a key point of contact for security topics towards customers, auditors and internal teams. You report to the Quality & Risk Officer and work with colleagues across all of Yenlo's departments, from engineers and architects to operations.

You switch with ease between strategic and operational work. This is a part-time position (0.5 FTE / 20 hours per week), based in the Netherlands with a hybrid working model.

Yenlo is a global leader in integration solutions, specializing in API management, integration technologies, and Identity & Access Management. The company focuses on hybrid and cloud-based iPaaS technologies and delivers premium solutions from leading integration vendors such as WSO2, Boomi, Microsoft Azure, and AWS. With more than 100 experts, Yenlo is a prominent player in API-first and cloud-first integrations.

Since 2008, Yenlo has been the strategic Platinum Partner of WSO2, earning multiple WSO2 awards. Yenlo has also been a key Boomi partner since 2015 and was recognized as “Best Partner 2021 and 2022” for low-code solutions. The company maintains strong global partnerships in both the Netherlands and the United States.

Yenlo is a company of approximately 100 colleagues, consisting, beyond our back-office teams, primarily of highly educated technical IT experts. We are a group of exceptionally skilled professionals (industry-leading in the field of Integration) who take pride in delivering innovative and impactful projects. As an international organization with more than 18 nationalities and English as our working language, we serve customers across the globe.

We have offices and colleagues in the Netherlands (Schiphol-Rijk (HQ), Leusden and Dongen), Germany, Spain, Sri Lanka, the United States, and Canada. Our customer base ranges from upper mid-market organizations to large enterprises across Finance, Government, Healthcare, Education, Industry, Retail, Transport, and Logistics. Examples include Boeing, Nationale Nederlanden, Hard Rock Café, Hans Anders, and various Ministries and Universities.

• Take ownership of information security with a focus on technical implementation and assurance
• Translate policies, regulations and customer requirements into practical and enforceable technical controls
• Perform and guide risk assessments (e.g. threat modeling, impact analyses)
• Review architectures and solutions to ensure security-by-design principles
• Coordinate and support security incident handling and root cause analyses
• Take responsibility for the security officer mailbox and follow up on incoming questions and reports
• Contribute to the setup and improvement of monitoring, logging and detection
• Execute and evaluate phishing and security awareness campaigns
• Ensure compliance with security requirements across internal teams and external suppliers
• Prepare and support audits (e.g. ISO 27001, NEN
  7510) with substantive technical input
• Report on risks, incidents and improvement actions

• Bachelor’s or Master’s degree in IT, Cyber Security or a related field

• 3+ years of experience in information security or a similar role
• Strong technical affinity and understanding (cloud, networking, APIs)
• Experience with risk management and quality/compliance processes, policy writing, BCM/BCP implementation
• Knowledge of frameworks and regulations such as…