As the Senior Information Security Officer, you will be the subject matter expert and contact point for security controls within DataSnipper. You will manage and update internal security policies, operate the internal security risk activities and run SOC 2 and other audit activities. You protect DataSnipper's information systems, product and customer data from security threats while ensuring resilience and availability of our IT infrastructure.
The best commercial opportunities don't come around every day. Selling technology that's transforming an entire industry is one of them.
We believe trust is essential to how society works. Every day, we rely on information that's been independently verified, from financial statements to the products we buy, to the sustainability claims companies make. Behind that trust are audit and finance professionals who examine evidence, verify information and hold organizations accountable.
At DataSnipper, we build AI solutions that empower those professionals to make those judgements. With Alwin by DataSnipper, our new agentic platform, AI agents now take on end-to-end audit and finance procedures, while every conclusion stays traceable to its source. That frees professionals to focus on the judgment and expertise that make their work so important.
We're trusted by Fortune 500 companies, government agencies and all Big Four audit firms. Today, more than 600,000 professionals across 3,000+ organizations in 175 countries rely on our platform, and in 2025 alone DataSnipper delivered more than $1.4 billion in productivity savings to its customers.
Backed by a $100 million Series B led by Index Ventures, at a $1 billion valuation, we've built a strong foundation for what's next. And as proud members of 1% for the Planet, we care about how we grow, not just how fast.
For our commercial teams, this is where things get exciting.
Alwin has just launched, demand is growing, and we're expanding into new markets and segments. With a product customers already rely on, there's a huge opportunity to make your mark.
If you're commercially driven, ambitious, and excited to build something bigger, this is you chance to help shape the future of audit and finance and accelerate your own career along the way.
Define and implement relevant information security policies
Lead risk assessment and internal security control efforts, including planning, tracking and monitoring remediation actions
Maintain compliance with SOC 2, ISO 27001, GDPR and other relevant frameworks; manage the annual SOC 2 audit end-to-end, including evidence collection and auditor liaison
Lead employee training and awareness initiatives
Be the subject matter expert for client security questions and concerns
Monitor and respond to security incidents, ensuring timely resolution and reporting
Be the expert in one or more areas of information security to identify, prevent and respond to risks and incidents
Partner with engineering and product teams to improve secure development processes
5–7 years in information security, with demonstrated ownership of compliance frameworks (SOC 2, ISO 27001) and their audits
Working experience across InfoSec, data privacy and compliance frameworks (SOC reports, ISO 27000 series, COBIT), plus IT and cloud security audits
Working knowledge across IAM, network and cloud security, secure development
Hands-on vendor risk assessments and third-party due diligence
Ability to test, evidence and validate operating effectiveness of controls
Proactive, self-directed, track record of tangible results
Leadership, communication and problem-solving; influences stakeholders at all levels
Nice to have
Security operations or product security project experience
Experience with EU security regulation (EU AI Act, Cybersecurity Act, etc.)
Certifications: CISSP, CISM, CISA, CCSP, Azure security
Experience with Vanta
Be part of one of the fastest-growing, profitable unicorn scale-ups in the Netherlands with a global impact
Equity (Stock Appreciation Rights) to share the company's success and growth
Pension plan with a 6% contribution on top of your base salary
28 vacation days per year (full-time) to support your work-life balance
Hybrid work model with at least 3 days onsite in our dynamic Amsterdam office
Daily, freshly prepared lunches by our in-house chef to keep you energized
NS business card for easy commuting to the office if applicable
Access to continuous learning and development initiatives to grow your skills
Engage with a vibrant international team spread across five global offices
Company-wide events like DataSnipper GO, where global teams come together
Access to a mental health and wellness platform supporting your wellbeing
Recruitment Process
Recruitment Screen (30 minutes, online)
Hiring Manager Interview (30 minutes, online)
Assessment Interview (60 minutes, on-site)
Final Interview (30 minutes, online)
At DataSnipper, we believe great ideas come from different perspectives, experiences, and backgrounds. We are committed to building an inclusive workplace and providing every candidate with a fair and equitable hiring experience.
Our hiring decisions are merit-based and grounded in the skills, experience, potential, and capabilities relevant to the role.
We welcome applicants regardless of age, race, ethnicity, nationality, gender, gender identity or expression, sexual orientation, religion, disability, or any other characteristic that makes you, you.
What matters to us is what you can bring to the role, the team, and DataSnipper. 🚀
Lidera iniciativas de governança, riscos e conformidade em segurança da informação, definindo controles e padrões, avaliando vulnerabilidades e apoiando a proteção contínua do ambiente e dos negócios.
Leads complex security investigations and incident response across cloud and enterprise environments, improves threat detection and SOC automation, manages vulnerability risk, and mentors analysts.
Analyze and respond to security threats by triaging detections, investigating incidents, building capabilities to detect sophisticated attacks, and improving endpoint and network visibility across SpaceX systems.
Administra e aprimora soluções de segurança da informação, investiga alertas e incidentes e mantém ferramentas de proteção, contribuindo para a estabilidade e segurança dos ambientes.
Protege ativos digitais por meio do monitoramento de sistemas, análise de vulnerabilidades, implementação de controles de segurança e resposta a incidentes, colaborando com equipes de TI e engenharia.
