Information Security Governance & Compliance Officer

Information Security Governance & Compliance Officer

This role is located in the Enterprise Architecture and Governance team of ICT. You will be a key member of the 1st Line Security team, ensuring that internal IT teams operate in alignment with cybersecurity policies, frameworks, and regulatory requirements defined by our Global Information Security Office (GISO).

As the bridge between security governance and operational IT, you translate policies into actionable practices and promote a culture of compliance and accountability across product owners and IT teams.

• Ensure GISO directives, security frameworks, and applicable laws and regulations are effectively translated and embedded within local security practices.
• Actively support IT teams in implementing security controls and embedding them into daily operations.
• Engage with Product Owners and technical teams to drive awareness and adherence to security requirements.
• Monitor and validate compliance with defined controls, identifying gaps and guiding remediation efforts.
• Ensure proper documentation and evidence collection in the auditing system to support internal and external audits.
• Contribute to continuous improvement of security processes and control effectiveness within the organization.
• Serve as a point of contact for 1st line security related compliance questions and guidance.

• Strong understanding of cybersecurity frameworks (ISO
  27001, NIST).
• Experience with control frameworks, audits, and compliance processes.
• Ability to translate policies into practical, implementable actions.
• Strong communication skills with the ability to influence and guide non‑security stakeholders.
• Detail oriented with a structured and process‑driven mindset.
• Comfortable working with documentation, evidence collection, and audit tooling.
• Proactive and able to operate independently within a small, focused team.

• Bachelor’s degree in Information Security, Computer Science, or a related field (Business/IT, Information Management, etc.) or equivalent proven work experience.
• At least 3‑5 years of experience in information security governance, IT compliance, risk management, or a closely related field.
• Hands‑on experience with control frameworks, audits, and evidence collection for internal or external audits.
• Collaborating with IT/Product teams to embed controls into operational processes.
• Security certifications such as CISSP, CGRC, CISM, and CompTIA Security+ are a plus.
• Fluent in English and a good working level of Dutch (or willingness to develop).

• Ability to connect and collaborate with colleagues across departments.
• Getting‑things‑done mindset with a focus on progress and clear guidance.
• Skill in translating high‑level security objectives into practical controls and deployments.
• Comfortable working in a fast‑paced, agile environment.
• Strong personal leadership and a proactive mindset, always looking for improvements.
• Clear communication and effective collaboration in an international and dynamic environment.

• Competitive salary €xxx gross per month (excluding 8% holiday allowance).
• 40 vacation days (20 statutory days plus a flexible budget worth 20 days).
• Flexible working hours and hybrid setup (40% from home, 60% in the office).
• Health & well‑being budget (€300 per year).
• Commuting allowance, with full public transport reimbursement.
• Working from home allowance.
• Collective pension scheme and health insurance discount.
• Access to on‑site health centers with gym, physiotherapists, and occupational therapists.
• Vanderlande Academy and training facilities to grow your skills.
• Active Vanderlande Network communities and initiatives.

If you feel you are a strong fit for this role, we encourage you to apply directly via our Workday vacancy link by submitting your resume and a short motivation.