Europe Information Security Officer in Renswoude

Are you looking for a strategic job where you are responsible for implementing the ISF Framework for our European business Units? Are you experienced in Information Security and do you want to work in a dynamic and international environment? Then we are looking for you!

As Europe Information Security Officer, you are part of the A.S. Watson Group Security function and support the Head of Information Security with implementing and executing the Information Security Risk Management Policies in the European region. You are responsible for the successful implementation of the ISF Standard of Good Practice Framework, remediation of to establish the required level of maturity across the Group and ongoing support to the Business Units (BU’s). This is not an operational role, but rather one with strategic and tactical responsibilities.
The Group is in the early stages in implementing the ISF Framework, so this provides an opportunity to be involved in the design and set up of the Framework. You will be involved in building an extended team of BU security officers who will provide the necessary representation at local level and embed security.

Your main tasks and responsibilities are:

• advising the Head of Information Security on information security issues;
• supporting the Head of Information Security with developing corporate IT Policies, Standards and baselines;
• managing the BU Information Security Managers to ensure information security control implementation and execution within local Business Units;
• providing guidance to the Group and BU’s by developing, maintaining and publishing up-to-date security procedures, standards and guidelines;
• managing and assessing information security risks for Group and high-risk projects such as conducting (third party) risk assessments and Information Security audits;
• reviewing the BU’s Information Security Year Plans and monitor status and progress on execution;
• planning, researching and specifying robust security architectures for IT Infrastructure and IT projects.

• A minimum of 6 years working experience in IT and information security.
• Information Security Certifications (CISSP, CISM, CISA, or equivalent industry certifications)
• Strong experience with standards work in information security, such as ISF or ISO 2700x a must.
• Expert knowledge of risk assessment procedures, technologies and Cyber security attacks and threads.
• Excellent knowledge of cyber security technologies, IT Infrastructure and IT standards (ITIL, network technology, storage, databases, various operating systems as Windows/UNIX), and web technologies (focusing on network security).
• Fluent English and Dutch verbal & written communication capability.
• Excellent communication skills – providing verbal and written communication that is outstanding to both direct reports and senior management as well as other stakeholders
• Exceptional interpersonal skills and the ability to work across the organization at all levels, and geographical locations.