Jobid: 1960_2875533 (0.133)
Overview
In this role you will lead PwC NL’s CISO office on governance, risk and compliance across a complex regulatory landscape. You will translate global security policy into practical standards, working with auditors, business teams and technology to embed security into day-to-day operations. You’ll drive strategic programs around resilience, regulatory readiness and AI governance, with a clear focus on risk assessment and control maturity. This is a visible, impactful position at a top professional services firm that shapes how security is managed across the organization.
Arbeidsvoorwaarden / Benefits
- competitive salary
- annual bonus
- permanent contract
- tailor-made training programs
- flexible mobility options
- 32 vacation days with purchase option for extra leave”,”personal well-being budget and OpenUp platform”,”hybrid working with home office setup and internet stipend”),
Verantwoordelijkheden
- Lead internal PwC control framework and act as SME for internal audit, including preparation, evidence testing, remediation tracking, and control maturity improvement
- Oversee ISO 27001, SOC 2, NIS2 and DORA implementations and maintain the CISO office pillar of the internal IT Unified Control Framework
- Lead annual security risk assessment and manage security awareness campaigns
- Define and oversee PwC NL’s AI governance and risk management, including policy development and oversight of responsible use
- Collaborate with committees and service lines to ensure security, risk and control requirements are understood and embedded across the business
Belangrijkste vereisten
- 5+ years in information security, IT governance, compliance, risk management and internal control
- Hands-on experience implementing and maintaining ISO 27001, SOC 2 and NIS2
- Security project management experience a strong plus
- Solid understanding of internal audit processes, control testing, issue remediation and evidence collection for regulators
- Knowledge of AI governance and AI risk; hands-on IT or cybersecurity experience is an advantage
- Fluent in Dutch at professional level
- proactive
- structured
- consultative
- ISO 27001 implementation
- SOC 2 implementation
- NIS2 implementation
Deel deze vacature: