Global CISO-Office GRC Security Compliance officer

Responsibilities

• Audit Coordination & Leadership:
  Coordinate the ICR team by maintaining the audit planning for Randstad markets and coaching team members to enhance their audit skills. Serve as the primary contact person for partners performing external audits.
• Compliance Strategy:
  Improve the Information Security 2nd line of defense role at Randstad Global by overseeing risk and monitoring IT/IS first‑line controls across Operating Companies.
• Audit Execution:
  Conduct periodic internal compliance reviews and audits to assess the effectiveness of the Information Security Management System (ISMS) in local markets, ensuring adherence to ISO 27001 standards and regulatory requirements.
• Gap Analysis & Remediation:
  Perform gap analyses to evaluate process effectiveness against corporate security policies; provide actionable recommendations and proposed remediation strategies to drive improvement.
• Advisory & Reporting:
  Provide guidance to global colleagues on becoming compliant with control frameworks and prepare comprehensive audit reports for senior management (including C‑level), highlighting findings and strategic recommendations.

• Good command of the English language.
• Excellent analytical skills.
• Ability to operate in a matrix organization.
• Self‑starting and self‑supporting.
• Ability to manage a team without direct reporting lines.
• Hands‑on, service‑oriented.
• Enjoys working in an international environment with different cultures.
• Enthusiastic and pragmatic, result‑driven.

• Education: A bachelor’s degree in Information Technology, Cybersecurity, or a related field. (
  
  Note:
  
  The Global Catalog standard for E6 typically suggests a Master’s degree, but relevant experience often compensates.)
• Experience: At least 5 years of experience in conducting internal audits and implementing information security best practices.
• Certification: Certified Lead Auditor in ISO 27001:2022 standard is required.
• Knowledge: Strong understanding of information security principles, controls, and frameworks. Basic understanding of Third‑Party Risk Management (TPRM) is preferred.
• Leadership: Proven ability to operate in a matrix organization and manage a team or coordinate efforts without direct reporting lines.

• Lead by example: demonstrate integrity and accountability in every action, including having the courage to speak up regarding non‑compliance or observed issues.
• Adhere strictly to compliance and safety protocols while taking full ownership of assigned tasks.
• Foster collaboration: share knowledge and collaborate effectively with colleagues, talent, and clients to achieve shared goals.

Contact:
Reach out to our Recruitment Business Partner, jennifer.ro for the full job spec and a confidential discussion.