Key Skills

Job Description

We are looking for an Information Security Officer in the Governance, Risk and Compliance (GRC) team who is passionate about helping Eindhoven University of Technology strengthen its security and compliance posture while enabling innovation, education, and research. In this role, you will work closely with stakeholders across the university to translate security, privacy, and compliance requirements into practical policies, standards, and guidance. You will help bridge the gap between governance and operations by understanding how research, education, and support processes work in practice and translating these insights into effective and pragmatic risk based security measures. You are able to combine analytical thinking with strong communication skills. You understand that successful security governance is not only about controls and policies, but also about collaboration, stakeholder engagement, and creating sustainable solutions that work within a complex and diverse academic environment. As a team, we value open-minded, forward-thinking colleagues who communicate effectively, challenge constructively, and help create an environment where ideas and expertise can thrive. Job Description Key responsibilities Apply security and compliance frameworks, such as ISO 27001, NIS2, and GDPR, to support the development and continuous improvement of TU/e's information security governance framework. Assess current security practices across scientific and service departments, identifying risks, strengths, and opportunities for improvement. Translate business, research, and technical requirements into pragmatic security policies, standards, and guidelines. Advise stakeholders on information security, privacy, risk, and compliance topics, balancing security requirements with operational and research needs. Facilitate discussions and workshops with stakeholders to establish common security principles and promote consistent ways of working across the university. Drive awareness, understanding, and adoption of security policies and standards through effective communication and stakeholder engagement. Support teams during the implementation of security requirements and provide practical guidance on policy interpretation and application. Collaborate with architects, product teams, researchers, privacy specialists, and other stakeholders to ensure a coherent and risk-based approach to security governance and compliance. Why this role is unique Eindhoven University of Technology operates in a highly dynamic environment where cutting-edge research, open collaboration, education, and information security come together. As an Information Security Officer, you will help shape policies and governance frameworks that protect the university while enabling innovation and academic freedom. Job Requirements Who are you? Experience supporting teams and projects within the cyber compliance domain; Experience with Agile way of working; Experience with Cyber Risk Management; Experience with ISO27001 implementation; Experience with NIS2 / CBW, GDPR is a pre; ISO 27001 Lead Implementer and CISA certified are a pre; Dutch and English language proficiency (C1 level minimum) are mandatory. Candidates must be able to communicate professionally, facilitate discussions, and produce documentation in both languages. Conditions of Employment An exciting position within an international yet personal university. You are right in the middle of the students, on a green campus within walking distance of the central station. Besides beautiful architecture, you will find varied workplaces and excellent sports facilities. We Also Offer You Salary in accordance with the Collective Labour Agreement for Dutch Universities, scale 10-11, ranging from € 3.706,- to € 6.682,- gross base salary per month (full-time), depending on your knowledge and experience. In addition to your base salary, you will receive an 8% holiday allowance and an 8.3% year-end bonus, both calculated based on your annual gross base salary. Generous leave options: a standard 29 days (based on a 38 hour working week) per year that you can increase to 41 days by working two hours more per week (flexible working hours). This is prorated if you work part-time. As a TU/e employee, you participate in the ABP pension scheme, providing retirement pension and pension benefits for surviving dependents and occupational disability. TU/e pays 70% of the pension premium, while employees contribute the remaining 30%. A favorable arrangement for more holidays or a sabbatical. A selection model for additional fringe benefits. Working hours in consultation for an optimal work-life balance. Unlimited access to the modern on‑campus TU/e Student Sports Center at an exceptionally affordable rate. We support your wellbeing with free 24/7 access to OpenUp, providing you and your family with mental health support, expert guidance, and online training. Scope for your talent with advancement prospects and excellent development opportunities such as mentoring, workshops and coaching. Partially paid parental leave and reimbursement for commuting expenses, working from home and the internet. On our website you can discover even more information about our conditions of employment. Build on your career at TU/e! About Us We are a leading international university where scientific curiosity meets a hands-on mindset. We work in an open and collaborative way with high-tech industries to tackle complex societal challenges. Our responsible and respectful approach ensures impact — today and in the future. TU/e is home to over 13,000 students and more than 7,000 staff, forming a diverse and vibrant academic community. Our university is located in Brainport Eindhoven — a world‑leading tech region with more than 7,000 high‑tech companies and strong R&D activity. Known for breakthroughs in AI, photonics, semiconductors and advanced manufacturing, Brainport is a place where technology serves people and society. Learn more about the Brainport region here. Information Do you recognize yourself in this profile and would you like to have more information about the position, please contact the hiring manager: Mark Braspenning, Manager OCIO, [email protected]. Visit our website for more information about the application process. You can also contact Mai Lan Pham, Senior Recruiter, [email protected]. Are you inspired and would like to know more about working at TU/e? Please visit our career page. Application If you are interested, please use the ‘apply’ button to send us your CV and letter of application with your motivation and a description of your qualifications. Ensure that you submit all the requested application documents. We give priority to complete applications. Screening of candidates begins as soon as applications are received and continues until the position is filled. Where applicable, internal candidates will be given priority over external candidates where they are equally suitable. We look forward to receiving your application! Please note You can apply online. We will not process applications sent by email and/or post. A pre-employment screening (e.g. knowledge security check) can be part of the selection procedure. For more information on the knowledge security check, please consult the National Knowledge Security Guidelines. Important for non-EU applicants: Please be aware that for this position, specific residence permit requirements apply. If you are a non-EU national, you may not be eligible to legally work in this role under current Dutch immigration regulations. We strongly advise you to contact our Staff Immigration Team ([email protected]) before applying to check your eligibility and to receive further guidance. Please do not contact us for unsolicited services.

Core Responsibilities

Develop and continuously improve the university’s information security governance framework, assess security practices and risks, and translate operational, research, and technical needs into practical policies and guidance. Advise and collaborate with stakeholders across the university to implement risk-based security and compliance measures and promote consistent security practices.

Requirements

Candidates need experience supporting cyber compliance teams and projects, Agile ways of working, cyber risk management, and ISO 27001 implementation; experience with NIS2/CBW and GDPR is preferred. Dutch and English proficiency at C1 level or higher is mandatory, while ISO 27001 Lead Implementer and CISA certifications are preferred.

Benefits

• Holiday Allowance
• Year-End Bonus
• Paid Leave
• Pension Scheme
• Flexible Working Hours
• Sabbatical Option
• Sports Facilities
• Mental Health Support
• Professional Development
• Partially Paid Parental Leave
• Commuting Expense Reimbursement
• Work-From-Home Reimbursement
• Internet Reimbursement