IT Security & Compliance Lead (Amsterdam, NLD)

58 minutes ago
Full-time
Lead
Cybersecurity
B Lab

B Lab

B Lab is a nonprofit network that spearheads the B Corp movement, aiming to reshape the global economy to prioritize the well-being of people, communities, and the planet through the certification of businesses committed to social and environmental per...

Diversified Consumer Services
51-250
Founded 2006

Description

  • Conduct security audits and risk assessments, maintain a prioritized risk register, and report security maturity metrics.
  • Establish and enforce network-wide security baselines aligned with a recognized framework such as ISO/IEC 27001:2022.
  • Review vendor and technology-platform security, coordinate penetration testing and vulnerability scans, and track remediation.
  • Define access-control standards including MFA, SSO, least privilege, and joiner/mover/leaver processes.
  • Maintain information security policies, standards, procedures, and the KnowBe4 security awareness program.
  • Own incident response planning and coordinate security incidents with Legal, Communications, and regional teams.
  • Support business continuity, disaster recovery, and backup-recovery testing.
  • Support GDPR, UK GDPR, LGPD, audit, due-diligence, and regulatory documentation requirements.
  • Advise engineering and data teams on secure-by-design practices and safe AI-tool adoption.

Requirements

  • 3+ years of experience in information security, IT governance, risk and compliance, or a related field.
  • Strong understanding of networking, cybersecurity, and security best practices for regulatory compliance.
  • Strong understanding of at least one recognized cybersecurity framework.
  • Experience conducting security audits, risk assessments, and vendor security reviews.
  • Working knowledge of global data-protection regulations such as GDPR and LGPD.
  • Experience developing or maintaining incident-response and business-continuity plans.
  • Hands-on familiarity with cloud and SaaS security, especially Google Workspace administration and identity and access management.
  • Ability to explain security risks to nontechnical colleagues and write clear policies.
  • Preferred: experience in nonprofit, federated, multi-entity, merger, or consolidation environments.
  • Preferred: experience with Salesforce security, KnowBe4, endpoint management, Google Vault, or similar tools.
  • Must be a Netherlands resident with unrestricted Dutch work authorization and within commuting distance of the Amsterdam office.
  • Must work full-time, 40 hours per week; first workday is in person for onboarding.

Benefits

  • Annual salary of €51,000–€61,000, inclusive of holiday allowance.
  • 20 vacation days annually, increasing to 25 after the third anniversary.
  • Paid time off for community service and professional development after the first year, plus a professional development budget.
  • Three floating holidays, two personal days, and additional organization-wide closure days.
  • B Lab pension scheme.
  • One-time stipend for a home-based workspace.
  • Remote-first, flexible work environment with workweek planning around personal commitments.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Information Security Engineer

Edmentum 1K-5K Diversified Consumer Services

Edmentum is seeking a Remote First Information Security Engineer to protect the systems, data, and learning platforms supporting millions of students while strengthening security operations and compliance.

Agile Penetration Testing
1 hour, 43 minutes ago

Regulatory Affairs Specialist

MANSCAPED 51-250 Personal Products

MANSCAPED is seeking a Regulatory Affairs Specialist to support the Senior Manager, Regulatory by maintaining global compliance for its cosmetics, personal care, grooming, electrical, battery, accessory, and packaging products.

1 hour, 43 minutes ago

ABA Director of Credentialing

Coyne & Associates 51-250 Diversified Consumer Services

The Director of Credentialing & Provider Enrollment will lead credentialing, enrollment, contracting, compliance, and accreditation operations for a growing ABA therapy organization serving children and adolescents across four affiliated companies in 10 states.

Salesforce
1 hour, 58 minutes ago

Compliance Regulatory Specialist

RecargaPay 251-1K Capital Markets

RecargaPay is seeking a Regulatory Compliance Specialist to support its financial and payment operations by interpreting Central Bank of Brazil and National Monetary Council requirements, translating them into business and control measures, and overseeing their effective implementation.

1 hour, 58 minutes ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers