Information Security Officer (ISO)

Permanent employee, Full-time · Hoofddorp NL

5,300 - 8,000 € per year

Your mission

At Macaw, guiding organizations in the era of AI starts with trust. Information security is fundamental to how we work - both with our clients and internally.
With emerging regulatory requirements, such as ISO 27001, NIS2, and the EU AI Act, we are looking for an Information Security Officer to strengthen and further develop Macaw’s security posture.
In this role, you will take ownership of our Information Security Management System (ISMS), ensuring it is effective, up-to-date, and aligned with both business and regulatory requirements.

You are the go-to for coordinating security initiatives, translating technical topics into clear business impact, and contributing to strategic decisions at both tactical and operational levels. In addition, you will oversee risk management across Macaw, taking ownership beyond information security.

Our Security and Privacy Team in the Netherlands is headed by you, and you report to the CFO. You will also consult our service lines (tech teams), managers, delivery teams and team up with other Security coordinators in Germany and Lithuania with a shared goal - to embed security and privacy into daily operations, decision‑making, and client engagements.

Your profile

How does your role look like?

Primary contact for information security and privacy internally and externally.
Own and continuously improve the ISMS.
Define, maintain and enforce security policies and documentation.
Execute risk assessments and manage the GRC risk register and mitigations.
Monitor and report on ISMS performance including monthly and management reviews.
Coordinate and support ISO 27001 and TISAX audits with Security Coordinators.
Lead security incidents, data breaches, and critical vulnerability handling.
Drive security awareness and training across Macaw.
Advise on security in contracts, third‑party management and commercial propositions, managing the security incident management and data breach processes.
Monitoring Critical Vulnerabilities on impact for the organization.
Keeping up to date with developments in legislation, security and privacy standards and threats and initiate and manage changes if the organization is impacted.

What do we expect from you?

Bachelor’s or master’s in Information Security, IT, Computer Science, or a related field.
Minimum of 3 years in security leadership roles with knowledge of IT, legislation, and regulations and information security.
Knowledge of ISO2700.
Certification or knowledge of CISSP, CISM, CISA and/or CIPP/E.
Knowledge of Risk Management.
Strong communicator, proactive and skilled in translating information risks into business impact.
Leadership & stakeholder management: building trusted relationships and influences cross-functional teams and senior stakeholders.
Working proficiency in English and Dutch.

Why us?

flexible working hours and the option to work in a hybrid setup;
a mobility budget that you can spend freely (for example, on an NS-Business Card or by using your own car – we reimburse your mileage costs);
8.5% holiday allowance, paid in May;
29 vacation days per year for a full-time position;
the option to buy or sell vacation days (up to 10 days);
training opportunities to support your personal and professional development;
phone and laptop that you can also use privately;
budget for your home office setup and internet;
beautiful office in Hoofddorp as your base, equipped with a pool table, table tennis, and an Xbox (as mentioned, we’re Microsoft fans).

Apply for this job

About us

Macaw. Your guide in the era of AI.

For more than 30 years, Macaw has been a pioneer in the field of innovation and technology. As your guide in the Era of AI, we are committed to transforming your organization, making it future-proof and creating strong distinctiveness. We make you successful by delivering innovative strategies and solutions through the combination of data, technology and creativity. We do this with a driven team that is a unique mix of engineers, data specialists and designers. Our track record of companies such as Heineken and VGZ enables us to achieve transformation and growth.

Our Mission

Contributing to the success of your organisation – that's not just our goal – we're also incredibly good at it. By bringing innovation together with the knowledge and experience of our specialists, as well as with data, the right technology and creativity, we help you grow.

We enable you to apply technology in a way that transforms your business and makes a meaningful contribution to your success. By harnessing the power and capabilities of the Microsoft ecosystem, we can tailor innovative, cutting-edge solutions to your unique needs.

Our culture

Powerful, synergistic teamwork, passion and a high goodwill factor characterize our culture. Our staff, called Macawers, are no ordinary professionals; They are professionals and specialists who always strive for the best solution and want to contribute to tangible results. For us, collaboration is more than an activity; It is a conviction, a connection that grows out of mutual respect and a sincere desire to bring out the best in each other.

Within our warm culture, there is a strong emphasis on nurturing, investing and developing talent. We encourage continuous learning and knowledge sharing, which is essential for growth. We have created a work environment based on trust and support, where employees can be themselves and reach their full potential.

Apply for this job

Your application!

Macaw. Your guide in the era of AI.

If you are interested, please apply to any of our current job opening on our career page.