Senior Security Officer

The NN Group IT Organization is looking for a senior information security officer who is able to take a proactive role in the management of information security risks. The ideal candidate should have a deep understanding of IT security and compliance methods, industry standards, and be proactive in adopting and implementing security practices and processes. Additionally, the candidate must be committed to staying up-to-date with security trends and advancements, and identifying opportunities for new initiatives that can lead to further enhancements.

What you are going to do

In our organisation all business units are responsible for ensuring the security of our IT environment. One of the key responsibilities of the Security Consultancy & Assurance product domain is to maintain and update the IT security standards, procedures and processes that apply to all business units within NN Group. Our ongoing challenge is to optimize these procedures and processes, automate as much as possible to increase quality and reduce manual procedures.

Your responsibilities include:

• Contribute and maintain the overall vision on security & compliance together with other security officers and the security architect. Contribute towards creating an overview of how the security processes and procedures are related to each other in order to improve efficiency.
• Active participation in determining the central vision and strategy for conducting security risk assessments and control automation, together with other security officers and the security architect. Advising the organisation on how to implement this strategy.
• Driving, coordinating and reporting on central improvement initiatives for security processes and procedures across NN Group. Being able to convey your message to both management teams as well as DevOps teams.
• Reviewing technical designs and security measures (e.g., secure protocols, encryption algorithms, IAM, firewalls, according NN security standards) for the designs of the technical environment: network, infrastructure (both cloud and on-premise data centres), applications, SaaS, external connections, etc.
• Able to translate security standards to help DevOps teams to secure their assets.

Who you are

• You are proactive and result-driven and ensure you meet agreements made
• You are concise and have an eye for detail, while keeping the overall picture and goal in mind
• You have a clear communication style, and know how to align with and report to higher management. You know how to manoeuvre in political environments
• You have hands-on experience with security and risk processes and procedures, so that you understand what impact changes to these processes and procedures can have on the organisation. Experience with control automation is an advantage
• You are skilled and experienced (+10 years) in IT and IT security, preferably educated as Bachelor or Master degree in IT (or other technical and/or security oriented study). Preferably certified CISSP, and/or cloud certification such as AWS or Azure, network or other relevant security and technical certifications

Who you will work with

The Security Consultancy & Assurance team is a well-balanced team in experience, background, age and a variety of skills, with intensive daily interaction, cooperation and supporting each other on difficult topics. We are very keen on keeping our environment secure and safe, continuous learning by coaching on the job and by training and education. And very important: having a lot of fun in working together and having regular team drinks, online pub quizzes and social activities like a beach clean-up!

Any questions?

If you have any questions about the job or process you can contact our recruiter Jarmo Fernhout via Jarmo.Fernhout@nn-group.com.