Skip to content

[Permanent] IT Security Engineer

  • Hybrid
    • Amsterdam

Job description

The IT Security Specialist is responsible for implementing and maintaining security measures to protect the organization's information systems and data. This role involves conducting security assessments, responding to security incidents, and ensuring compliance with security policies and regulations. 


Responsibilities:

• Support the IT Security Officer in ensuring compliance with security policies and procedures, promptly and structurally resolve security incidents.
• Assist in the development and implementation of security strategies and initiatives.
• Work on Digital Operational Resilience Act (DORA) compliance, including IT risk management, incident handling, and resilience testing
• IT vendors' adherence to company compliance and managing compliance with regulations such as DORA and GDPR.
• Conduct IT continuity tests and report results to relevant stakeholders.
• Support with audit work by ensuring compliance with audit requirements and providing necessary documentation (currently executed by end-user specialists).
• Support the IT Security Officer in defining and updating information data classification guidelines, policies.
• Implement and maintain security measures to protect information systems and data.
• Provide security training and awareness programs.

Job requirements

  • Education: HBO (Bachelor’s) with approx. 3 years’ work experience, preferably a degree in computer science, Information Security, Cybersecurity, or a related technical field.

  • Fluent in Dutch and English.

  • Relevant 3-5 years work-experience in IT security roles.

  • Experience with security compliance frameworks relevant to the financial, real estate industry (e.g., ISO 27001, DORA, NEN 7510)

  • Experience with security incident response and management.

  • Familiarity with Dutch and EU data protection laws, particularly GDPR (AVG in Dutch).

  • Professional certifications such as CISSP, CEH, CISM, CompTIA Security+, or equivalent Dutch certifications (like those from EXIN).

  • Technical Skills in:

    • Vulnerability assessment and penetration testing,

    • Security monitoring and threat detection,

    • Cloud security (AWS, Azure, Google Cloud),

    • Identity and access management systems,

    • Security information and event management (SIEM) tools,

    • Knowledge of encryption technologies and protocols.

  • Detail-oriented with a strong focus on security and reliability.

  • Experience in preparing, responding, and participating in external and internal audit checks, Experience in drafting required reports and corrective action procedures.

  • Ability to work independently and as part of a team.

  • Proactive and able to identify opportunities for improving the network and security.

or

Riverflex logoHomepage