Information Security Officer
Owns Nicolab's ISO 27001:2022 information security management system in Amsterdam: runs audits, the security committee, risk and vulnerability management, and staff security training — while advising developers on secure medical device software and handling office IT — to protect patient health data for stroke care providers.
- Compensation
- Not disclosed
- Location
- Amsterdam
- Work setup
- Not specified
- Seniority
- Not specified
- Employment
- Part time
- Experience
- 3+ years
- Category
- Security
- Posted
Skills
Must have
- BSc degree or higher in engineering or related field
- 3+ years of experience in information security, data protection, IT or software development
- Broad interest in all aspects of information security, data protection and cyber security
- Take ownership and communicate proactively throughout the organization
- Knowledge and experience with ISO 27001
- Written and oral communication skills in English
Nice to have
- Knowledge and experience with NEN 7510, ISO 13485, ISO 14971, GDPR, HIPAA
- Additional languages are a plus
Full description
Job Description
We are looking for an Information Security Officer who will strengthen and maintain our Information Security Management System according to ISO standard 27001.
You’ll develop and guard processes and practices to protect patient health information entrusted to us by our customers (stroke care centers and other health care providers) and all of our company assets. Your work will have a significant impact on our efforts to expand our presence in regions all over the world by ensuring compliance to regional data protection requirements. Through continuous improvement of our information security systems, you will increase the benefit, availability and safety of our products for our customers and patients globally.
Key Responsibilities
Core ISO tasks, goals and responsibilities
- You will assume overall responsibility for the design, implementation, monitoring and governance of Nicolab's information security framework according to ISO 27001:2022 and other applicable standards and regulations.
- You will host our bi-weekly Information Security Committee meeting and discuss all security aspects related to our product and company with representatives from various parts of the organization.
- You will maintain and build a proactive, security-responsible culture at Nicolab by communicating and training personnel to propagate cyber security policies, procedures and practices throughout the organization.
- You will plan, manage, execute and follow up on all control checks defined by Annex A of ISO 27001 to ensure the correct implementation of defined processes.
- You will organize and conduct internal audits to assess continued compliance to ISO 27001 (and NEN 7510) and you will host external audits for surveillance and recertification audits for ISO 27001 (and NEN 7510).
- You will manage Nicolab’s Information security risk management file.
Information Security tasks, goals and responsibilities that could be handled by a role in Engineering
- You will consult Nicolab’s software developers to create safe and secure solutions for our medical device products and deployments.
- You will oversee and organize Nicolab’s vulnerability management including vulnerability scans, penetration testing and related follow-up actions.
- You will communicate to our customer’s data protection personnel by aligning on data protection and cyber security requirements.
- You will prepare security related documentation to support sales, marketing and other activities in the company.
IT tasks (Amsterdam office)
- You will manage various (critical) IT systems including services, contracts, renewals and user onboarding.