Compliance & Security Officer

Compliance is not paperwork. It’s trust, made visible.

Most companies use AI to move faster.
We believe speed without guidance changes nothing.

We design collaborative AI that strengthens human judgment instead of replacing it.

By connecting powerful technology to human potential, we ensure people don’t lose control but regain it.

Our clients don't just execute faster. They adapt in real time. They make better decisions. And they build resilience into the core of their organizations. Organizations that thrive because they change.

We are Yuma, one of the fastest-growing digital transformation groups in the Benelux. We were built differently. Bringing together leading expertise in AI, data, technology and creativity to help organizations solve complex challenges and move forward with confidence.

To keep us audit-ready and make compliance simply part of how we work, we're looking for a Compliance & Security Officer.

Yuma is on a growth journey. With ambitious plans to further strengthen our position in Mission Critical IT — and a regulatory landscape that tightens by the quarter — we’re looking for a Compliance & Security Officer who brings structure, keeps us audit-ready, and makes compliance something our teams use.

In this role, you are responsible for our own management systems and regulatory posture. You safeguard our ISO 9001, 14001, 27001 and NEN 7510 certifications, keep us on track for NIS2, DORA and GDPR, and prepare us for what’s coming with the EU AI Act and the EU Data Act. You work close to the business: with engineers, service delivery, HR and the management team.

You are the go-to person for compliance and security within Yuma. You translate frameworks and regulations into policies, processes and controls that fit how we work, and you keep them alive through audits, reporting and awareness. You advise the management team on risk, and you make sure evidence is there when a client, auditor or regulator asks. Besides that, you’ll

• Own and maintain our GMS and ISMS: policies, risk register, controls and internal audits under ISO 9001, 27001 and NEN 7510
• Manage certification and surveillance audits for ISO 27001, NEN 7510, ISO 9001 and ISO 14001, from preparation to closing findings

• Drive our NIS2 and DORA readiness and keep our reporting and register obligations in order
• Safeguard GDPR compliance: processing register, DPIAs, data subject requests and processor agreements
• Strengthen Yuma to be compliant with the EU AI Act and EU Data Act, and translate what they mean for our services and our clients

• Act as the link to security operations on incidents, vulnerabilities and follow-up actions
• Run supplier and vendor security assessments, and support security questions in client tenders
• Build cyber awareness across the organisation through training, simulations and clear communication
• Report on compliance status, risks and improvement plans to the management team

You have three to five years of experience in compliance, information security or risk, and you’ve seen a certification audit from the inside. You combine structure with pragmatism: you know the standards, but you’d rather have a control that people follow than a policy nobody reads. You’re comfortable explaining a regulation to the management team in the morning and discussing findings with an engineer in the afternoon.

Affinity with IT infrastructure, cloud and managed services

Strong analytical skills and a structured way of working, while keeping the big picture in view

Able to write a policy that is clear to a non-specialist

Certification such as ISO 27001 Lead Implementer or Lead Auditor, CIPP/E, CISM or CISSP is a plus

Proactive, independent and…