Business Information Security Officer (BISO)

Do you want to kickstart your career in information security at one of the leading professional services firms? Are you eager to learn how governance, risk, and control come together in a real enterprise environment?

In this role you'll support PwC NL’s Business Information Security Officer (BISO) and the wider CISO office in the day-to-day work that keeps PwC NL secure and compliant. You'll get hands-on exposure to ISO 27001, internal audits, risk registers, and security awareness campaigns from day one. It's a role where structured work, attention to detail, and curiosity will help you grow fast.

You'll join the CISO office, a team of informal and ambitious colleagues who work closely together on firm-wide security topics. You'll work alongside the BISO on recurring GRC and internal control activities, helping keep security governance organized, tracked, and delivered on time. You'll support evidence collection for audits, maintain dashboards and risk logs, coordinate awareness campaigns, and help keep the team's SharePoint environment up to date. It's a varied role where you'll learn how security frameworks work in practice and contribute to meaningful, visible work across the firm.

• Support the BISO with day-to-day GRC and internal control activities, including meeting preparation, follow-up on action items, and coordination with stakeholders.
• Help maintain the Global Information Security Policy, ISMS, and related local standards, procedures, and supporting documentation.
• Run local security awareness and training campaigns, including coordination, communication, tracking participation, and content updates.
• Gather, organize, and maintain evidence for internal controls, audits, reviews, and framework compliance activities, and support risk monitoring by maintaining risk registers and following up on open issues.
• Maintain the CISO office dashboard, kanban boards, and the team's SharePoint environment, including content creation, access management, and periodic reviews.

You work in a structured, proactive way and bring energy and a growth mindset to your team. You're patient, responsive, and pay close attention to detail in everything you deliver.

• Minimum of 1 year of experience in information security, IT risk, compliance, internal controls, audit support, or related areas.
• Good understanding of information security governance, risk, and control processes, with a willingness to learn how these work in a structured enterprise environment.
• Hands-on knowledge of ISO 27001 implementation or maintenance is a strong advantage.
• Comfortable maintaining dashboards, action trackers, kanban boards, and risk logs, with strong attention to detail in evidence collection, documentation, and follow-up.
• Fluent in Dutch at a professional level.

With us you get the chance to be yourself, bring out the best in yourself in a high-performance organization, and grow within our global network. We offer you, among other things:

• A competitive salary in line with your experience and the opportunity to grow further in your career;
• A motivating work environment where collaboration with ambitious colleagues and recognition of your contributions are central;
• A wide range of tailor-made training programs focused on professional growth and leadership development;
• A mobility allowance for your business travel, with the option to use various mobility providers via one convenient app;
• 32 vacation days and the option to purchase additional leave;
• At PwC, your well-being is our priority. That's why we offer a personal well-being budget to support your physical and mental health, as well as access to the well-being platform OpenUp;
• You'll work on challenging and meaningful work, use leading technology including AI tools, learn from the best, and receive coaching support. Together we work as an inclusive team to make real impact;
• The flexibility of hybrid working, including a fully equipped home office and a monthly net expense allowance for internet and other costs;
• Curious about everything else we have to offer? Discover all our benefits and extras on our website.

Excited? We'd love to receive your motivation letter, transcript, and CV showing why you're the right fit for this role. Apply directly!

After your application:

• You'll receive an immediate confirmation in your inbox;
• If your qualifications match this role, we'll contact you within two weeks for a short introductory conversation;
• If everyone is enthusiastic, we'll schedule an online assessment. Depending on the outcome, you'll receive an invitation for a first interview.

Would you like more information about the role at PwC? Peter de Vries is happy to talk with you by email.

Peter de Vries – Lead Recruiter peter.de.vries@pwc.com