Ciso office lead governance risk compliance Vacatures

Over de vacature

Overview

In this role you will lead PwC NL's CISO office on governance, risk and compliance across a complex regulatory landscape. You will translate global security policy into practical standards, working with auditors, business teams and technology to embed security into day-to-day operations. You'll drive strategic programs around resilience, regulatory readiness and AI governance, with a clear focus on risk assessment and control maturity. This is a visible, impactful position at a top professional services firm that shapes how security is managed across the organization.

Arbeidsvoorwaarden / Benefits

• competitive salary
• annual bonus
• permanent contract
• tailor-made training programs
• flexible mobility options
• 32 vacation days with purchase option for extra leave","personal well-being budget and OpenUp platform","hybrid working with home office setup and internet stipend" ,

Verantwoordelijkheden

• Lead internal PwC control framework and act as SME for internal audit, including preparation, evidence testing, remediation tracking, and control maturity improvement
• Oversee ISO 27001, SOC 2, NIS2 and DORA implementations and maintain the CISO office pillar of the internal IT Unified Control Framework
• Lead annual security risk assessment and manage security awareness campaigns
• Define and oversee PwC NL's AI governance and risk management, including policy development and oversight of responsible use
• Collaborate with committees and service lines to ensure security, risk and control requirements are understood and embedded across the business

Belangrijkste vereisten

• 5+ years in information security, IT governance, compliance, risk management and internal control

• Hands-on experience implementing and maintaining ISO 27001, SOC 2 and NIS2

• Security project management experience a strong plus

• Solid understanding of internal audit processes, control testing, issue remediation and evidence collection for regulators

• Knowledge of AI governance and AI risk; hands-on IT or cybersecurity experience is an advantage

• Fluent in Dutch at professional level

• proactive

• structured

• consultative

• ISO 27001 implementation

• SOC 2 implementation

• NIS2 implementation