Group Information Security Officer
€110,000 - €120,000 per year
Key Skills
Job Description
We are looking for an experienced and hands-on Group Information Security Officer. In this position you design and implement Group information security standards across our business operations and monitor performance accordingly. You direct the Information Security Office, including information security representatives from our auction brands and our Group Risk and Compliance team.
As part of our strategy, we make significant investments in our auction management software and data platforms to make them the invisible engines of our business. We work with different platforms, some for a specific brand and some integrated with multiple brands. While learning from our integration efforts we continue building new features in the system at the same time. You have an essential role in this transition to ensure a security mindset among the business teams and developers and to ensure that security best practices are created and followed.
What you will do
To be successful, you should have expert analytical skills and in-depth knowledge of information security best practices to prevent and resolve a wide range of security threats. Top candidates will also be excellent communicators, able to train and educate our teams in various information security topics. To monitor performance against Group information security standards, you have a solid level of leadership and management skills allowing you to closely cooperate with Group and Regional functions.
In this postion you:
Own and continuously develop TBA’s information security strategy, policies, and standards across all regions and brands.
Act as the single point of accountability for information security, including cloud, application, infrastructure, and data security.
Lead risk assessments, threat modeling, and vulnerability management, maintain an up-to-date security risk register, and work in close cooperation with our Product and Tech teams to ensure that our network and data remain secure.
Own security incident response, including detection, escalation, communication, and post-incident reviews.
Help with future compliance, regulatory and standardization projects (e.g., ISO 27001/2, GDPR, NIS2).
Manage third-party and supplier security, including due diligence, ongoing reviews, and security clauses in contracts.
Drive security awareness and training across the organization.
Provide clear reporting to executive management, including risk posture, incidents, and remediation progress.
What you bring
Degree in computer science or a technology-related field.
Professional information security certification.
More than 8 years of experience in information security management, including conducting risk assessments, setting companywide standards, actively creating awareness, and managing incidents.
Solid understanding of relevant laws, regulations and standards related to information security (amongst which NIS2 and ISO27001/2)
Excellent problem-solving and analytical skills.
Self-driven and enjoy working together towards a common goal.
Ability to educate a technical as well as a nontechnical audience about various security measures.
Effective verbal and written communication skills in English.
What we offer you
Independent and varied role within an entrepreneurial and innovative organization
Yearly salary of € 110.000 - € 120.000 (including holiday allowance), depending on experience
Good pension scheme
Bonus scheme (up to 1 gross monthly salary per year)
25 vacation days
Laptop and iPhone
Training opportunities
Working in a team of professionals, where hard work is well combined with humor
Ready to join us?
Apply via our careers page or reach out directly. We'd love to hear from you.
Core Responsibilities
The Group Information Security Officer will own and develop the organization's security strategy, policies, and standards across all regions and brands. They are responsible for leading risk assessments, managing security incidents, and ensuring compliance with regulatory frameworks like ISO 27001 and NIS2.
Requirements
Candidates must hold a degree in computer science or a related field and possess professional information security certifications. A minimum of 8 years of experience in information security management, including risk assessment and incident handling, is required.
Benefits
- Pension scheme
- Bonus scheme
- 25 vacation days
- Laptop
- IPhone
- Training opportunities
About TBAuctions
Industry: Internet Marketplace Platforms
Company size: 1,001-5,000 employees
TBAuctions (TBA) is Europe’s leading online auction platform for B2B used industrial equipment with over 1,200 team members across the Nordics, Benelux +UK, and Continental Europe. We believe that Everything Has Value. With our proprietary intelligent auctioning platform, we make the process of buying and selling more effective and efficient by using technology, automation, and economies of scale. TBA’s digital auctions make this happen by creating a cross border platform that offers a perfect match between demand and supply of used business goods. Together with our brands (Auksjonen, Auktionshuset dab, British Medical Auctions, HT Auctions & Valuations, Klaravik, PS Auction, Surplex, Troostwijk Auctions, and Vavato), TBA brings sustainable trade to a higher level. Sourcing locally and selling globally, millions of products are auctioned every year. Our vision is to be the first and most trusted choice to buy and sell used business assets, maximizing their lifespan and value; accelerating the circular economy. We are passionate about making digital auctioning the best option to create value for B2B sellers and buyers. We seamlessly connect close, easy, and fast sourcing with global demand by multiplying the power of our people, technology, and data. In doing so, we will build a profitable business, reward and develop our people, and extend the lifecycle of assets to reduce waste and emissions. We are building a better future, come join us!