[Hiring] Freelance Information Security Officer @OpenUp

Role Description

ISMS ownership:

• Own ISO/IEC 27001:2022 and NEN 7510:2024 end to end, including the policy set, Statement of Applicability, risk register, and the annual revision cycle.

Audit & certification:

• Prepare for and steer internal and external audits, and drive corrective actions to closure.

Enterprise security assurance:

• Own security due-diligence questionnaires (DDQs), vendor assessments, and the security sections of enterprise RFPs for new deals and renewals.

Cloud security governance:

• Govern our Azure posture (Defender for Cloud, vulnerability management, logging, private networking) and turn gaps into a prioritized action list for engineering while holding remediation SLAs.

AI governance:

• Build and own our AI governance framework, and review AI features (AI coach, AI-assisted session notes) for data protection, consent, human oversight, and model risk.

AI assurance readiness:

• Lead ISO/IEC 42001 and EU AI Act readiness.

Incident & continuity:

• Oversee incident management, the data-breach protocol, and business-continuity/disaster-recovery testing.

Risk management:

• Mature our risk process toward ISO 31000 alignment.

Qualifications

• 6+ years in information security, with hands-on ownership of an ISO/IEC 27001 ISMS through external audits, not just participation.
• A track record of owning enterprise security due-diligence / DDQs.
• Enough Azure cloud-security knowledge (Defender for Cloud, Entra ID, Key Vault, networking, managed identities) to govern and challenge architecture.
• Strong policy-writing skills, and the ability to translate controls into practical engineering actions.
• Excellent written and asynchronous communication, and real comfort in a distributed, cross-cultural team.
• Pragmatic, outcome-oriented, and comfortable with ambiguity.
• ISO/IEC 27001 Lead Auditor or Lead Implementer certification.

Requirements

• Familiarity with AI/LLM systems and AI governance frameworks (ISO/IEC 42001, EU AI Act, NIST AI RMF, ISO/IEC 23894).
• NEN 7510 or other healthcare / high-sensitivity data experience.
• CISSP, CISM or CIPP/E; AI-governance training such as AIGP.
• Secure-development background (OWASP, SAST/SCA, supply-chain hardening).

Next steps

Excited about this role at OpenUp? We love to learn more about you. Send us your application through our website and we will be in touch with you soon.

At OpenUp, everyone is welcome to apply - regardless of color, age, gender, nationality or any other label. Our hiring decisions are based on indiscriminate objective measures. We embrace what makes you unique and we believe that a diverse team is crucial to success. If you are ready to OpenUp, join us!

We may use artificial intelligence (AI) tools to streamline parts of our recruitment process. These tools assist our recruitment team but do not replace human judgement. All hiring decisions are made by humans. If you would like more information about how we use AI in the process, please contact us.