Information Security Officer

The Mendix organization at Siemens Digital Industries Software is seeking a proactive and expert Information Security Officer to join our dynamic team. In this critical role, you will be instrumental in safeguarding our information assets, ensuring compliance with evolving regulatory landscapes, and encouraging a robust security culture across the organization.

Responsibilities

Design and evaluate the effectiveness of security controls, assessing their ability to mitigate risks and recommending improvements; proactively monitor compliance against security frameworks and regulatory requirements (e.g., NIST, ISO 27001, SOC I & II, C5, ISO 42001) and report on progress; support internal and external audits by gathering, assessing, and providing necessary evidence; manage the entire lifecycle of security evidence from collection and secure storage to version control and archival; research, establish, and maintain information security policies, standards, and procedures; communicate effectively about information security risks, standards, and policy updates; collaborate with applicable departments to ensure security controls are effectively implemented, maintained, and continuously optimized

Requirements

3-5 years of progressive experience in an Information Security, IT Audit, or Compliance role; solid understanding of information security principles and practices; solid understanding of security operations, controls, and best practices within cloud environments (e.g., AWS, Azure, GCP); in-depth knowledge and practical experience with information security standards, frameworks, and regulations (e.g., ISO/IEC 27001 family, GDPR, SOC 2 Trust principles); familiarity with enterprise data environments, system integrations, and software development lifecycles (SDLC); independent and active information security certification (e.g., CISM, CISSP, ISO 27001 Lead Implementer, CompTIA Security+); exceptional analytical and problem-solving abilities; excellent written and verbal communication skills in English; high level of initiative, self-direction, and ability to work independently while collaborating effectively across departments

Nice to have

Experience with cloud security frameworks and tools

Benefits

Impactful role; continuous learning and development opportunities; collaborative and inclusive team environment; health and wellness benefits; eligibility to earn incentive compensation