Key Skills

Job Description

Job Requirements Bachelor’s or Master’s degree in Information Security, Computer Science, Business Administration, or a related field. Several years of experience in an Information Security, Governance, Risk & Compliance (GRC), or Operational Security role. Proven experience developing, implementing, and maintaining an Information Security Management System (ISMS), preferably aligned with ISO 27001. Strong knowledge of information security governance, risk management, and security frameworks. Experience conducting audits, supplier assessments, and supporting certification processes. Solid understanding of IT infrastructure, cloud environments, and security controls. Experience with OT security within a manufacturing environment is a strong advantage. Fluent in Dutch and English, both written and spoken. Soft Skills Able to influence stakeholders without relying on formal authority. Strong written communication skills with the ability to translate complex topics into clear policies and procedures. Analytical and capable of balancing risks, business needs, and practical realities. Well-organized and disciplined in maintaining documentation and evidence. Comfortable working with both senior leadership and operational teams. Pragmatic approach to security and compliance challenges. Resilient and able to remain structured during audits, incidents, and changing priorities. Job Description As our Operational Security Officer, you will help build and strengthen the foundation of information security across our international organization. This is a newly evolving role where policy development, governance, and implementation will be at the center of your work. The organization is growing internationally, projects are becoming more complex, and customers increasingly expect demonstrable security maturity. To support that growth, we are looking for someone who can create structure, establish clear security policies, and ensure those policies become part of daily operations rather than remaining documents on a shared drive. You will operate across both IT and operational environments, working closely with management, IT, engineering, production, and external stakeholders. Success in this role means creating a security framework that is practical, scalable, and embraced throughout the organization. Your Responsibilities Develop, maintain, and continuously improve the company's information security policies, standards, and procedures. Build, implement, and manage the Information Security Management System (ISMS). Translate security frameworks and compliance requirements into practical processes and working instructions. Perform security risk assessments and coordinate mitigation plans with business stakeholders. Support internal audits, customer assessments, and certification activities. Conduct supplier security assessments and monitor follow-up actions. Advise management and project teams on security risks, compliance requirements, and improvement opportunities. Your team You will become part of the BPM & IT department, a team focused on improving processes, digitalization, and operational excellence across the global organization. While you will work closely with your direct colleagues in IT and business process management, the reality of the role is that your stakeholder network reaches far beyond the department itself. On any given week, you may be discussing security governance with senior management, reviewing supplier requirements with procurement, supporting IT with security controls, or helping operational teams understand the impact of new policies. Because of this, strong relationship-building skills are just as important as technical expertise. The team values ownership, practical thinking, and collaboration. There is plenty of room to shape the role and introduce improvements, but equally an expectation that you take initiative and build structure where it does not yet exist. For someone who enjoys creating policies, implementing governance frameworks, and embedding security into the way an organization operates, this role offers both responsibility and genuine impact. If you would like to learn more about the role, the international environment, or the security challenges ahead, we would be happy to start a conversation. If this sounds like the type of challenge you are looking for, we look forward to receiving your application. Your benefits Working at HQ Pack means being part of a strongly growing worldwide operating organization called HQ Group. Despite its strong international character and over 800 colleagues in the Netherlands, the organization is characterized by its informal character and short communication lines. Within our organization, you will get the opportunity to further develop yourself both personally and professionally. We attach great value to a collegial and pleasant working atmosphere. Naturally, we will provide you with the resources you need to perform this job well. We have our own employment conditions package and offer, collective pension, Bicycle plan, travel allowance and the possibility for 5 extra days off. We create to protect

Core Responsibilities

Develop and maintain information security policies, standards, procedures, and the company’s ISMS, translating frameworks and compliance requirements into practical processes. Conduct risk assessments and supplier reviews, coordinate mitigation actions, and support audits, customer assessments, certifications, and security advice for management and project teams.

Requirements

Requires a bachelor’s or master’s degree in information security, computer science, business administration, or a related field, along with several years of relevant information security, GRC, or operational security experience. Candidates should have experience implementing an ISMS, preferably aligned with ISO 27001, knowledge of governance and risk frameworks, audit and supplier assessment experience, and fluency in Dutch and English; OT security experience in manufacturing is an advantage.

Benefits

• Collective Pension
• Bicycle Plan
• Travel Allowance
• Five Additional Days Off
• Professional Development Opportunities