Senior Information Security Officer

As a Senior Information Security Officer, you will be part of the global security and compliance team. This team takes care of corporate security, including IT and cloud security, as well as the full compliance program of Kiteworks. As Kiteworks sells secure communication and collaboration products, security and compliance are top priorities for the company. Kiteworks has many security certifications and assurance reports, and as the business expands to new jurisdictions, it will need to obtain more certifications in the coming years.

As a senior member of the team, you will report directly to the Global IT CISO and are expected to work independently as well as take the lead on team projects. The role requires you to work on many things simultaneously, such as running audits, performing gap or threat analyses, and answering customer questions. We also count on you to champion security improvement initiatives, whether that's access management or software development. As part of these projects, you will be collaborating with other teams, such as IT and development.
Kiteworks moves fast, and it's our team's job to manage risk while helping the business grow just as fast. That balancing act matters more than ever as Kiteworks embraces AI, and we're the ones making sure that adoption happens securely.

We are specifically looking for a pragmatic problem solver who not only identifies risks but also proposes mitigations and gets things done.

We may be in compliance, but we are allergic to bureaucracy.

Note: this is a hybrid role with three days in our Amsterdam office. 

What You'll Do

• Taking ownership of external security audits such as ISO 27001, BSI C5, and SOC 2
• Performing gap analysis and implementing new security frameworks and standards
• Keeping information security procedures up to date across departments
• Acting as full domain owner for at least the identity and access management and supplier management domains
• Executing control tasks, for example access checks, supplier reviews, and internal audits
• Using AI to automate recurring tasks
• Coordinating with control owners to support timely execution of their tasks
• Implementing security improvement projects, for example in IT or software development
• Handling security incidents
• Taking part in the weekly security meeting and flagging new risks and opportunities
• Answering questions on security and privacy from customers, prospects, and colleagues
• Onboarding newly acquired companies to the global security and compliance program

What You'll Bring

• At least 5 years' experience in information security and compliance
• Experience with ISO 27001 and information security management systems
• Experience with BSI C5 or SOC 2
• Experience with audits
• Experience with risk analysis
• Experience with identity and access management
• Knowledge of the GDPR and privacy legislation
• Affinity with IT and software development
• Affinity with AI
• Experience in a tech company is highly preferred
• Pragmatic problem-solving skills
• Ability to work independently
• Collaboration skills
• Fluent in English