Information Security Officer
NICo-lab B.V. · Amsterdam
Your mission
Job Description
We are looking for an Information Security Officer who will strengthen and maintain our Information Security Management System according to ISO standard 27001.
You’ll develop and guard processes and practices to protect patient health information entrusted to us by our customers (stroke care centers and other health care providers) and all of our company assets. Your work will have a significant impact on our efforts to expand our presence in regions all over the world by ensuring compliance to regional data protection requirements. Through continuous improvement of our information security systems, you will increase the benefit, availability and safety of our products for our customers and patients globally.
Key Responsibilities
Core ISO tasks, goals and responsibilities
- You will assume overall responsibility for the design, implementation, monitoring and governance of Nicolab's information security framework according to ISO 27001:2022 and other applicable standards and regulations.
- You will host our bi-weekly Information Security Committee meeting and discuss all security aspects related to our product and company with representatives from various parts of the organization.
- You will maintain and build a proactive, security-responsible culture at Nicolab by communicating and training personnel to propagate cyber security policies, procedures and practices throughout the organization.
- You will plan, manage, execute and follow up on all control checks defined by Annex A of ISO 27001 to ensure the correct implementation of defined processes.
- You will organize and conduct internal audits to assess continued compliance to ISO 27001 (and NEN 7510) and you will host external audits for surveillance and recertification audits for ISO 27001 (and NEN 7510).
- You will manage Nicolab’s Information security risk management file.
Information Security tasks, goals and responsibilities that could be handled by a role in Engineering
- You will consult Nicolab’s software developers to create safe and secure solutions for our medical device products and deployments.
- You will oversee and organize Nicolab’s vulnerability management including vulnerability scans, penetration testing and related follow-up actions.
- You will communicate to our customer’s data protection personnel by aligning on data protection and cyber security requirements.
- You will prepare security related documentation to support sales, marketing and other activities in the company.
IT tasks (Amsterdam office)
- You will manage various (critical) IT systems including services, contracts, renewals and user onboarding.
- You will manage and service user endpoint maintenance and protection
- You will manage and service office IT infrastructure
Your profile
QualificationYou have a passion for information security and are driven to communicate and improve implementation of secure practices related to our product and the entire company. You have experience working in an ISO 27001 compliant management system preferably including ISO 13485 (Medical Devices) and have knowledge of data privacy regulations like GDPR and HIPAA.
You are always looking for innovative approaches to establish and maintain compliance to regulations and requirements and keep our management system efficient and lean to facilitate growth and maintain flexibility.
You embrace the start-up mindset. You thrive in a young and international environment. You adapt to changing company structure and goals. You support commercial needs. You enjoy the challenge to achieve the best results with limited resources.
Requirements
- BSc degree or higher in engineering or related field.
- 3+ years of experience in information security, data protection, information technology or software development.
- You have a broad interest in all aspects of information security, data protection and cyber security.
- You take ownership and responsibility for security aspects within Nicolab and communicate proactively throughout the organization.
- Knowledge and experience with ISO 27001.
- Knowledge and experience with NEN 7510 (IS in health care), ISO 13485, ISO 14973, GDPR, HIPAA is preferred.
- Communication skills, written and oral, in English, additional languages are a plus.
Why us?
We Offer
- Chance to make a real difference in patients' lives
- Work in a stimulating environment with a motivated team
- Flexible Employment Agreement: Part time / Full time / Freelance
- Flexible working hours
- Flexible paid time off*
- Laptop + home office/IT equipment*
- Commuting to work - costs reimbursement
- Pension plan scheme*
- Employee Stock Option Plan (ESOP)*
- Corporate programs including Employee Referral Program with rewards
- Learning & Development opportunities including in-house training and coaching, professional certifications, and over 22,000 courses on LinkedIn Learning Solutions and much more*All benefits and perks are subject to certain eligibility requirements
Application Process - Interview with HR
- Interview Hiring Manager - Prior employment verification check (reference check)
- Meet & Greet CEO
Interviews are in English