Information security officer

Join us in shaping the future of information security by developing and enforcing policies that safeguard the confidentiality, integrity, and availability of IT systems and business information. Be a key player in managing audits and ensuring the highest standards across the organization.

What are you going to do

Are you passionate about safeguarding information and ensuring robust security practices across IT systems and processes? As an Information Security Specialist, you'll play a critical role in protecting our organization's data, collaborating with stakeholders, and driving compliance with security standards. You'll contribute to maintaining certifications, managing risks, and fostering a culture of security awareness.

Key Responsibilities

• Collaborate with stakeholders across the business and IT teams to identify, assess, and mitigate security risks.
• Conduct and document information security assessments (BIA) with system and process owners.
• Manage and maintain the Information Security Management System, ensuring compliance with internal and external audit requirements.
• Lead third-party risk assessments and support tender responses with security-related input.
• Promote security awareness by implementing training programs, phishing campaigns, and incident management processes.

Your work environment

This role is based at BAM's headquarters in the Netherlands. Occasionally, you may be required to travel to other BAM offices, which could involve overnight stays. Advance notice will always be provided for such travel. BAM embraces flexible working and offers a hybrid working model, allowing you to work both from home and the office, ensuring a balance that suits your lifestyle.

What do we offer?

At BAM we believe in investing in our employees and creating a positive and inclusive work culture. At BAM you can work in a hybrid way, which allows you to work flexibly and find a good balance between work and private life.

• A salary between € 4.160,- and € 5.200,- gross per month, depending on your knowledge and experience. This is based on a 40-hour working week and excludes 8% holiday pay;
• Good secondary employment conditions in accordance with the Construction and Infrastructure collective labor agreement, such as a budget for sustainable employability (2,18%), 25 vacation days, 15 schedule free days and 3 short-term absenteeism days per calendar year;
• Reimbursement of your travel costs (100% public transport or a kilometer allowance), laptop and iPhone;
• A unique opportunity to develop yourself broadly, where you stay informed of the latest techniques and knowledge through our own 'BAM Learning'. In addition, other courses and training are possible.

Who are we looking for?

This role requires a strong background in information security and risk management, with technical expertise, industry certifications, and excellent interpersonal skills to collaborate effectively with stakeholders and drive security initiatives.

• Relevant industry certifications (e.g., CISSP, CISM, Comptia Security) and ISO27001 implementation experience.
• Practical knowledge of third-party risk management and data protection legislation.
• Proficiency in producing dashboards and reports using tools like Power BI.
• Strong analytical, problem-solving, and organizational skills.
• A professional, team-oriented attitude with excellent communication abilities.

Submitting a Certificate of Good Conduct (VOG) is part of the application procedure.