Als Information Security Officer IT bij SVB vertaal je BIO/ISO 27001/NIS2 naar IT-maatregelen, coördineer je implementatie (IAM, SIEM, SAST, Zero Trust), bewaak je scope/planning/kwaliteit en stuur je verbeteracties uit audits en risicoanalyses.
Role purpose: Lead and improve the organization's IT information security posture by defining security governance, managing risk, ensuring compliance, and coordinating security operations with internal and external stakeholders. - Develop, maintain, and enforce information security policies, standards, and procedures. - Conduct risk assessments, threat modeling, and security reviews for IT systems and projects. - Ensure compliance with relevant regulations and frameworks (e.g., ISO 27001, NIST, GDPR, SOC 2) as applicable. - Oversee security controls, vulnerability management, and remediation tracking. - Coordinate incident response planning, tabletop exercises, and post-incident reviews. - Partner with IT, engineering, and business teams to embed security by design in architecture and operations. - Manage security awareness training and promote a security-first culture. - Support audits, maintain security documentation, and report security metrics to leadership. - Information security governance: policy management, risk management, control frameworks, and audit readiness. - Technical security knowledge: IAM, network security, endpoint security, cloud security, logging/monitoring, and secure configuration. - Incident management: detection, response coordination, and root-cause analysis. - Communication: ability to translate security risk into business impact and actionable recommendations. - Stakeholder management: cross-functional collaboration and vendor/third-party risk oversight.
Binnen de SVB heet deze functie Local Information Security Officer (LISO) . Als Information Security Officer IT ondersteun je Directie IT bij het verbeteren van informatiebeveiliging en cybersecurity.
Je werkt ...