Information Security Officer

Your opportunity to join the energy transition!

Being an Information Security Officer at 2Solar gives you an opportunity to take ownership of information security of the company and contribute to the sustainable energy transition. Your work will make sure that our internal information and information of our customers is secure and protected. At 2Solar we work in an international environment and collaborate on several application modules and innovative projects. Your experience, knowledge, and solutions are welcome in our fast-growing organization.

• Develop, implement, and maintain comprehensive company-wide security policies and procedures.
• Organize the process of maintaining ISO27001 certification. Once required, prepare, obtain, and maintain other relevant security-related certifications.
• Conduct regular security assessments, audits and penetration testing to identify vulnerabilities and ensure compliance with security standards, and internal processes and controls. Propose and implement new controls to ensure acceptable risk levels.
• Manage security incidents and breaches, including response planning and investigations.
• Ensure robust data protection practices are in place, monitor data security compliance, and address potential risks to protect sensitive information from unauthorized access and breaches.
• Drive the adoption of a DevSecOps culture, put attention into importance of security across all phases of software development.
• Collaborate with development teams to integrate security best practices and tools into the software development lifecycle, enhance their security knowledge and practices through training, development, and usage of appropriate tools.
• Prepare and present security reports.
• Stay updated on the latest security threats and countermeasures.

• 5+ years of proven experience in a security engineer/officer role with a focus on cloud software applications or internal IT infrastructure.
• Strong knowledge of security frameworks and certifications (e.g., ISO27001, SOC 2).
• Experience in developing and implementing security policies and procedures.
• Familiarity with risk management methodologies and security audit processes.
• Excellent communication skills and the ability to work collaboratively across teams and departments.
• Familiarity with secure coding practices and integrating security into the SDLC.
• A strategic mindset with the ability to translate security needs into comprehensive security strategies.
• A proactive approach to security challenges, with the ability to lead and inspire a culture of security awareness.

• Certifications in relevant fields (CISSP, CISM, CEH, OSCP etc.).
• Experience in a DevSecOps environment.
• Previous experience in training and skill development initiatives.

• Interest in sustainable software development.

• Good salary and good pension arrangement.
• Choose your own laptop.
• 25 holidays on full time basis.
• Fresh lunch every day.
• A healthy workplace: daily fresh fruit at the office and an ergonomic workplace with standing desk.
• An informal, dynamic, inspiring and professional working environment.
• FUN quarterly meetings, team events and lots of celebrating.
• Continuous professional (or personal) growth.
• Plenty of room for personal input.
• We are easily accessible by public transport and have plenty of parking spaces.

Join our GreenTech Scale-up! In this role you will mainly be working on developing new functionalities and optimizing our existing software to an even better scalable product. Are you the person that actively thinks along in a team and like to work on the most diverse projects? If you love to work on modern and sustainable technology, and you are able to help us in our transition, we would love to get in touch.

We are looking for candidates open to hybrid work, which includes working from home and spending at least two days a week in our Zwolle office.