Key Skills

Job Description

Do you combine a strong understanding of information security with a solid technical background? As a Technical Security Officer at Yenlo, you are responsible for safeguarding and improving information security across our organization and customer environments. In this role, you ensure that security is not only defined, but also effectively implemented and embedded in practice, especially within our cloud and integration landscape. You act as a key point of contact for security topics towards customers, auditors and internal teams. You report to the Quality & Risk Officer and work with colleagues across all of Yenlo's departments, from engineers and architects to operations. You switch with ease between strategic and operational work. This is a part-time position (0.5 FTE / 20 hours per week), based in the Netherlands with a hybrid working model. About Yenlo Yenlo is a global leader in integration solutions, specializing in API management, integration technologies, and Identity & Access Management. The company focuses on hybrid and cloud-based iPaaS technologies and delivers premium solutions from leading integration vendors such as WSO2, Boomi, Microsoft Azure, and AWS. With more than 100 experts, Yenlo is a prominent player in API-first and cloud-first integrations. Since 2008, Yenlo has been the strategic Platinum Partner of WSO2, earning multiple WSO2 awards. Yenlo has also been a key Boomi partner since 2015 and was recognized as “Best Partner 2021 and 2022” for low-code solutions. The company maintains strong global partnerships in both the Netherlands and the United States. Yenlo is a company of approximately 100 colleagues, consisting, beyond our back-office teams, primarily of highly educated technical IT experts. We are a group of exceptionally skilled professionals (industry-leading in the field of Integration) who take pride in delivering innovative and impactful projects. As an international organization with more than 18 nationalities and English as our working language, we serve customers across the globe. We have offices and colleagues in the Netherlands (Schiphol-Rijk (HQ), Leusden and Dongen), Germany, Spain, Sri Lanka, the United States, and Canada. Our customer base ranges from upper mid-market organizations to large enterprises across Finance, Government, Healthcare, Education, Industry, Retail, Transport, and Logistics. Examples include Boeing, Nationale Nederlanden, Hard Rock Café, Hans Anders, and various Ministries and Universities. What you will do Take ownership of information security with a focus on technical implementation and assurance Translate policies, regulations and customer requirements into practical and enforceable technical controls Perform and guide risk assessments (e.g. threat modeling, impact analyses) Review architectures and solutions to ensure security-by-design principles Coordinate and support security incident handling and root cause analyses Take responsibility for the security officer mailbox and follow up on incoming questions and reports Contribute to the setup and improvement of monitoring, logging and detection Execute and evaluate phishing and security awareness campaigns Ensure compliance with security requirements across internal teams and external suppliers Prepare and support audits (e.g. ISO 27001, NEN7510) with substantive technical input Report on risks, incidents and improvement actions What you bring Bachelor’s or Master’s degree in IT, Cyber Security or a related field 3+ years of experience in information security or a similar role Strong technical affinity and understanding (cloud, networking, APIs) Experience with risk management and quality/compliance processes, policy writing, BCM/BCP implementation Knowledge of frameworks and regulations such as ISO 27001, SOC2, BIO, DORA, NIS2, GDPR Experience in advising senior stakeholders on security topics Experience with customer interactions, audits and security assessments (e.g. pen tests) Certifications such as CISSP, CISM are a plus Who you are You communicate strongly in English (Dutch, spoken and written, is a plus) and explain complex security topics clearly, to engineers and non-technical stakeholders alike You take initiative and put your own policies and advice into practice independently You influence without formal authority and get people to act on security, even when it is not the popular choice You weigh risks pragmatically and find the balance between security and business pace You stay calm and structured when an incident or audit puts pressure on the team You handle confidential information with discretion and integrity What we offer Competitive salary, depending on your experience Performance bonus based on organizational and personal goals 8% holiday allowance 27 paid vacation days (pro rata for 0,5 FTE), national holidays and expense scheme A good pension plan and disability insurance Laptop and business mobile phone Net internet allowance of €25 per month Flexibility with a part-time setup (0.5 FTE / 20 hours per week) Hybrid working model with three office days: Monday and Tuesday or Thursday Opportunities to shape and mature the security function within Yenlo A collaborative, international team of experienced engineers and consultants Interested? We would love to hear from you. Acquisition in response to this vacancy is not appreciated.

Core Responsibilities

Own and improve information security across the organization and customer environments, translating policies and requirements into practical technical controls and supporting risk assessments, secure architecture reviews, incident response, monitoring, and awareness campaigns. Ensure compliance across teams and suppliers, support audits such as ISO 27001 and NEN7510, and report on risks, incidents, and improvement actions.

Requirements

A bachelor's or master's degree in IT, cybersecurity, or a related field and at least three years of experience in information security or a similar role are required. Candidates should bring technical knowledge of cloud, networking, and APIs, experience with risk and compliance processes and relevant frameworks, and the ability to advise stakeholders and support customer assessments and audits; CISSP or CISM certifications are a plus.

Benefits

• Performance Bonus
• Holiday Allowance
• Paid Vacation Days
• National Holidays
• Expense Scheme
• Pension Plan
• Disability Insurance
• Laptop
• Business Mobile Phone
• Internet Allowance
• Hybrid Working
• Professional Development Opportunities