Information Security Officer

At Samotics, you'll own information security across the company, safeguarding both company and customer information as the business grows. Leading a team of one security specialist, you'll report directly to the Chief Product Officer.

Job description

Hi, we are Samotics! 👋

Our AI-driven solutions help industrial companies cut energy waste, prevent pollution, and eliminate unplanned downtime. With a mission to make industrial companies more sustainable, we're leading in technological innovation.

About the team 👥

You'll own information security at Samotics. Leading a team of one security specialist, you're the person who safeguards our information and our customers' information as we grow. You'll report directly to our Chief Product Officer.

Security at Samotics is not a back-office function. We build AI-driven monitoring products for critical industrial equipment, and our customers trust us with sensitive operational data. Our Information Security Management System and ISO 27001 certification are central to that trust. You'll work across the whole company, from engineers and product managers to third-party suppliers and external auditors, translating security from policy into daily practice.

Our working style is simple. We empower people to talk directly with the colleagues who shape and use our systems, and to act on what they hear. AI is part of how every team works, and we expect everyone to bring it into their daily work as a lever that makes them faster, sharper, and more useful to the people around them.

Your challenge 🎯

As Information Security Officer, you own our information security end-to-end. You propose and implement the measures and policies that protect us, and you make sure our ISMS stays fit for purpose as the company scales. You'll set the direction, and with your security specialist, you'll make it real.

You're equally comfortable thinking in policy and getting hands-on: writing an awareness training one day, reviewing a supplier's security posture the next, and preparing for an ISO 27001 audit the week after. You enjoy moving between the strategic and the practical.

We're also hiring for the kind of person you are, not just what you know. We're looking for someone pragmatic and driven, who brings clarity to messy situations, communicates well with technical and non-technical colleagues alike, and is good to work alongside.

What you'll do

• Own our information security measures end-to-end, from proposal through implementation to continuous improvement
• Own and maintain our Information Security Management System, keeping it fit for purpose as we grow
• Oversee information security audits, including our ISO 27001 audit
• Drive annual IT audit as part of mandatory financial audit
• Communicate security goals and measures clearly across the company, and provide awareness training to colleagues
• Collaborate with teams across Samotics to surface potential improvements and vulnerabilities
• Verify that third-party suppliers meet our security requirements
• Analyse security incidents to find the root cause and put preventive measures in place
• Test and improve our business continuity plan
• Use AI tools actively in your daily work. Continuously improve how you, your team, and your function use AI to deliver more value.
• Lead and develop one security specialist

Job requirements

What you'll bring ⭐

• 3+ years of experience in information security. We're also open to sharp-minded individuals with less experience, as long as you have the right background and the drive to grow into the role fast
• A Bachelor's degree in cybersecurity, computer science, or a related field
• Strong communication skills: you can explain security to engineers and to leadership, and turn conversations into action
• Sharp attention to detail
• Genuine interest in staying current with information security: new measures, threats, and vulnerabilities
• Pragmatic, driven, open, and a team player who's good at stakeholder management
• Demonstrable, current use of AI in your work. Specific tools, specific use cases, with real impact.

Nice to have

• A Master's degree in cybersecurity, computer science, or a related field
• A relevant certification (e.g. CCSP, CISSP, CISM)
• Penetration and vulnerability testing experience
• Understanding of programming in Python and software development workflows

What we offer 🚀

• Make a positive environmental impact by preventing pollution and eliminating unplanned downtime
• Vibrant and professional company culture based on freedom and responsibility
• Competitive salary, holidays, and benefits package (incl. pension scheme, parental leave)
• On-site meals, snacks, and drinks
• Hybrid and on-site working opportunities
• Company events: from pub quizzes to chess tournaments and wine tastings, there's always something fun happening
• In line with our mission, our office is made with 90% recycled material at a three-minute walk from Leiden Central train station
• Enrolment in our Stock Appreciation Rights (SAR) scheme