Your mission
Job Description
We are looking for an Information Security Officer who will strengthen and maintain our Information Security Management System according to ISO standard 27001.
You’ll develop and guard processes and practices to protect patient health information entrusted to us by our customers (stroke care centers and other health care providers) and all of our company assets. Your work will have a significant impact on our efforts to expand our presence in regions all over the world by ensuring compliance to regional data protection requirements. Through continuous improvement of our information security systems, you will increase the benefit, availability and safety of our products for our customers and patients globally.
Key Responsibilities
Core ISO tasks, goals and responsibilities
You will assume overall responsibility for the design, implementation, monitoring and governance of Nicolab's information security framework according to ISO 27001:2022 and other applicable standards and regulations.
You will host our bi-weekly Information Security Committee meeting and discuss all security aspects related to our product and company with representatives from various parts of the organization.
You will maintain and build a proactive, security-responsible culture at Nicolab by communicating and training personnel to propagate cyber security policies, procedures and practices throughout the organization.
You will plan, manage, execute and follow up on all control checks defined by Annex A of ISO 27001 to ensure the correct implementation of defined processes.
You will organize and conduct internal audits to assess continued compliance to ISO 27001 (and NEN 7510) and you will host external audits for surveillance and recertification audits for ISO 27001 (and NEN 7510).
You will manage Nicolab’s Information security risk management file.
Information Security tasks, goals and responsibilities that could be handled by a role in Engineering
You will consult Nicolab’s software developers to create safe and secure solutions for our medical device products and deployments.
You will oversee and organize Nicolab’s vulnerability management including vulnerability scans, penetration testing and related follow-up actions.
You will communicate to our customer’s data protection personnel by aligning on data protection and cyber security requirements.
You will prepare security related documentation to support sales, marketing and other activities in the company.
IT tasks (Amsterdam office)
You will manage various (critical) IT systems including services, contracts, renewals and user onboarding.
You will manage and service user endpoint maintenance and protection
You will manage and service office IT infrastructure
Your profile
Qualification
You have a passion for information security and are driven to communicate and improve implementation of secure practices related to our product and the entire company. You have experience working in an ISO 27001 compliant management system preferably including ISO 13485 (Medical Devices) and have knowledge of data privacy regulations like GDPR and HIPAA.
You are always looking for innovative approaches to establish and maintain compliance to regulations and requirements and keep our management system efficient and lean to facilitate growth and maintain flexibility.
You embrace the start-up mindset. You thrive in a young and international environment. You adapt to changing company structure and goals. You support commercial needs. You enjoy the challenge to achieve the best results with limited resources.
Requirements
Location: The Netherlands
BSc degree or higher in engineering or related field.
3+ years of experience in information security, data protection, information technology or software development.
You have a broad interest in all aspects of information security, data protection and cyber security.
You take ownership and responsibility for security aspects within Nicolab and…