Group Information Security Officer Group Risk

ppWe are looking for an experienced and hands-on Group Information Security Officer. In this position you design and implement Group information security standards across our business operations and monitor performance accordingly. You direct the Information Security Office, including information security representatives from our auction brands and our Group Risk and Compliance team. /p pAs part of our strategy, we make significant investments in our auction management software and data platforms to make them the invisible engines of our business. We work with different platforms, some for a specific brand and some integrated with multiple brands. While learning from our integration efforts we continue building new features in the system at the same time. You have an essential role in this transition to ensure a security mindset among the business teams and developers and to ensure that security best practices are created and followed. /p h3What you will do /h3 pTo be successful, you should have expert analytical skills and in-depth knowledge of information security best practices to prevent and resolve a wide range of security threats. Top candidates will also be excellent communicators, able to train and educate our teams in various information security topics. To monitor performance against Group information security standards, you have a solid level of leadership and management skills allowing you to closely cooperate with Group and Regional functions. /p pbIn this postion you: /b /p ul liOwn and continuously develop TBA’s information security strategy, policies, and standards across all regions and brands. /li liAct as the single point of accountability for information security, including cloud, application, infrastructure, and data security. /li liLead risk assessments, threat modeling, and vulnerability management, maintain an up-to-date security risk register, and work in close cooperation with our Product and Tech teams to ensure that our network and data remain secure. /li liOwn security incident response, including detection, escalation, communication, and post-incident reviews. /li liHelp with future compliance, regulatory and standardization projects (e.g., ISO 27001/2, GDPR, NIS2). /li liManage third-party and supplier security, including due diligence, ongoing reviews, and security clauses in contracts. /li liDrive security awareness and training across the organization. /li liProvide clear reporting to executive management, including risk posture, incidents, and remediation progress. /li /ul h3What you bring /h3 ul liDegree in computer science or a technology-related field. /li liProfessional information security certification. /li liMore than 8 years of experience in information security management, including conducting risk assessments, setting companywide standards, actively creating awareness, and managing incidents. /li liSolid understanding of relevant laws, regulations and standards related to information security (amongst which NIS2 and ISO27001/2) /li liExcellent problem-solving and analytical skills. /li liSelf-driven and enjoy working together towards a common goal. /li liAbility to educate a technical as well as a nontechnical audience about various security measures. /li liEffective verbal and written communication skills in English. /li /ul h3What

we offer
you /h3 ul liIndependent and varied role within an entrepreneurial and innovative organization /li liYearly salary of € 110.000
- € 120.000 (including holiday allowance), depending on experience /li liBonus scheme /li liPension scheme /li li25 vacation days /li liLaptop and iPhone /li liTraining opportunities /li liWorking in a team of professionals, where hard work is well combined with humor /li /ul /p #J-18808-Ljbffr