Business Security Officer Enterprise Engineering Technology

We bieden je

• NS Business Card 2nd class, which gives you unlimited travel, also privately (or declare kilometers travelled if you prefer your own transport)
• 13th month and holiday allowance (paid with your monthly salary)
• 27 vacation days for a 5-day working week and one Diversity Day
• Hybride werken
• Allowances for setting up your home office and for internet use
• A modern pension administered by BeFrank
• Plenty of training and learning opportunities

Over de rol

As the Business Security Officer (BSO) for Group IT / Enterprise Engineering Technology, you make sure that the digital products are secure and compliant. You have a thorough understanding of application services (including managed services and SaaS) and IT infrastructure on an enterprise level, as well as modern information security practices. Together with a team of security officers, you support the EET product teams (product managers, product owners and DevOps teams). You make sure security is embedded in the daily practice of the teams, and ensure security topics get the right priority together with the MT members of EET. You also keep track of progress on important security initiatives and IT controls to monitor and steer on this.

What you are going to do

Your contribution consists of deep technical knowledge and experience with application services and IT infrastructure (preferably within the financial sector), and developments around applying security within the application and infrastructure domain. You possess the competencies to make security an integral part of the mindset and way of working of both DevOps teams and the management team.

As the maturity per team will vary, you are able to change your approach per team. NN puts a lot of emphasis on the automation of security compliancy and IT controls. You will contribute by enabling automation and promoting implementation. With your expertise you will increase the security mindset and maturity of the department.

You keep up with developments in the market, and NN provides many opportunities to enhance your knowledge and develop yourself professionally.

Key activities and requirements

• Expanding your (proven) security knowledge and experience, including a vision on how security can be most effectively applied to application services and infrastructure products
• Experience with IT Control Tracking, frameworks and risk assessments, including automation of these processes
• Ensuring EET DevOps teams can take their responsibilities regarding security and compliancy; as BSO you take the lead while execution and responsibility of security lies with the DevOps teams
• Leading the automation of IT Control Tracking in EET and representing EET in Group IT for this
• Coaching and steering a team of 7 security officers

Who you are

• In-depth knowledge of IT infrastructure in an enterprise environment (preferably in the financial sector)
• Focus and ambition to make security part of the way of working, ensuring a high level of security and operational resiliency
• Ownership of end-to-end security responsibilities
• One or more certifications such as CISSP, CISM, CRISC
• Cooperation with other BSOs within NN Group to jointly improve security within NN

Who you will work with

As a Business Security Officer, you will work closely with all MT members of Enterprise Engineering Technology.

Via standardized digital platforms, EET enables digital frictionless journeys for internal and external customers. EET focuses on employee and customer experience and supplies frictionless journeys, excellent products, standard applications and business technology. EET consists of Product Domains, and every domain differs in maturity and structure.

The security officers in your team are operationally involved and provide support and consultancy. As the BSO you ensure nothing gets missed and keep oversight, aligning goals with your team and the MT of EET. You are also the contact person for Operational Risk Management (ORM) and Corporate Audit Services (CAS).