The NN Group IT Organization is looking for an information security officer who is able to take a proactive role in the management of information security risks. The ideal candidate should have a deep understanding of IT security and compliance methods, industry standards, and be proactive in adopting and implementing security practices and processes. Additionally, the candidate must be committed to staying up-to-date with security trends and advancements, and identifying opportunities for new initiatives that can lead to further enhancements.

What you’re going to do

In our organization all business units are responsible for ensuring the security of our IT-environment. As a team, our biggest challenge lies in verifying and reviewing technical measures to ensure their correct implementation, while also providing support to the devops teams. We must balance residual risk with the necessary measures and assist asset owners and their teams in making informed decisions. Our ongoing challenge is to optimize IT security procedures and processes, automate as much as possible to increase quality and reduce manual procedures. As a member of the security assurance team, your role would be to define, review and support the implementation of standards and guidelines, ensuring a structured and aligned approach to IT security and compliance for NN Group.

Your responsibilities:

Reviewing technical designs and security measures (e.g., secure protocols, encryption algorithms, IAM, firewalls, according NN security standards) for the designs of the technical environment: network, infrastructure (both cloud and on-premise datacenters), applications, SaaS, external connections, etc
Working with the Security team on a wide variety of security and compliance tasks, e.g. periodic control tracking with the Group IT departments, regulatory compliance reporting, deep-dive asset reviews, threat modelling, provide IT security training and coaching, interpret vulnerabilities and security incidents on impact for services, supply chain security, etc
Working in close cooperation with the devops infrastructure and application teams, as well as other security disciplines like our own Security Operation Center and Defensive security teams to proactively identify and support teams to implement the appropriate security measures

What we offer you

NN invests in an inclusive, inspiring work environment and in skills and competences for the future. We match this with employee benefits that are in line with what is needed today and in the future. This way, we offer our employees the opportunity to get the best out of themselves. We offer you:

Salary between €3.783 and €6.375, depending on your knowledge and experience, a 13th month and holiday allowance are paid with your monthly salary
27 vacation days for a 5-day working week and one Diversity Day
A modern pension administered by BeFrank and plenty of training and learning opportunities
NS Business Card 2nd class, which gives you unlimited travel, also privately. Do you prefer to travel with your own transport? Then you can declare the kilometres travelled
Allowances for setting up your home office and for internet use

Who you are

You are proactive and result-driven and ensure you meet agreements made
Concise and eye for detail while keeping the overall picture and goal in mind
Clear communication style and being able to cooperate with people with various backgrounds
You are a team player: you are supportive and flexible in picking up tasks when priorities change
Skilled and experienced (+3 years) in IT and IT security, preferably educated as Bachelor or master degree in IT (or other technical and/or security oriented study). Preferably certified CISSP and/or SSCP, and/or cloud certification such as AWS or Azure, network or other relevant security and technical certification

Who you will work with

The IT Security Assurance team is a well-balanced team in experience, age and a variety of skills, with intensive daily interaction, cooperation and supporting each other on difficult topics. We are very keen on keeping our environment secure and safe, continuous learning by coaching on the job and by training and education. And very important having a lot of fun in working together and having regular team drinks, online pubquizes and social activities like a beach clean-up!