Chief Information Security Officer (CISO) Greater Amsterdam, Netherlands Area

The Company is seeking a Chief Information Security Officer (CISO) to lead its information security program and embed security into daily operations and organizational culture. Responsibilities include managing the information security management system and security policies, maintaining assurance and audit readiness, and translating risk appetite and regulatory developments into practical standards. The CISO will verify technical controls, oversee vulnerability risk and penetration testing, lead incident response, manage supplier security risks, and ensure continuity and recovery plans are tested. The role also involves advising on product and architecture decisions, communicating with clients, auditors, and regulators, and building security awareness across the organization. Candidates should have at least eight years of information security experience, including three or more years leading a security function, and experience managing an ISMS through ISO 27001 and SOC 2 Type II audits. Knowledge of regulated financial services and frameworks such as DORA, PSD2, and GDPR is required, along with a strong grounding in cloud security and the technical judgment to assess designs and challenge engineering teams. Applicants should be pragmatic, risk-focused, independent, and effective communicators, with fluent written and spoken English; Dutch is an advantage. Relevant certifications, privacy governance and DPIA experience, incident response, third-party risk management, assurance reporting, digital identity, and responsible AI governance are beneficial.

Hiring Company

Ockto