Looking for an Information Security Officer who turns compliance into a competitive advantage
At CARYA, automotive dealers and dealer groups across the Benelux and beyond run their most business-critical processes on our platforms. That trust is never a given — it's earned every single day. And you're the one who makes it structurally stick.
We're growing. Regulations (NIS2/CyFun, Cyber Resilience Act, GDPR) are evolving fast. And our security governance is growing with them. That's why we're looking for an Information Security Officer with a sharp eye for policy and a pragmatic mindset.
You're the backbone of our security governance — not the person who firefights ad hoc, but the architect of a mature, auditable system.
Governance & compliance (~50%) You build and maintain our ISMS in line with ISO 27001, translate NIS2/CyFun and the Cyber Resilience Act into workable policy, and report clearly on risks to senior management. You plan and guide internal and external audits, and ensure findings are effectively followed up.
Supply chain & customers (~50%) You review supplier contracts for security and privacy provisions, conduct third-party risk assessments, and support sales and legal teams in handling customer security questionnaires and due diligence.
What you bring:
Proven experience in information security governance within an IT or software environment
In-depth knowledge of ISO 27001/27002:2022 — Lead Implementer or Lead Auditor certification is a strong asset
Hands-on experience with a GRC tool
Solid knowledge of NIS2/CyFun, CRA and GDPR
Strong stakeholder management skills: you connect IT, business, legal and executive teams
Fluent in Dutch and English; French is a plus given our Benelux footprint
A key role in a growing international group where your work genuinely matters — without getting lost in bureaucracy. You'll have a direct line to management and personally set the standard for how the group handles security.
On top of that: a competitive package (to be discussed), hybrid working, and an organisation that truly invests in its people.
Interested? Send your CV and motivation to [contact / email] or reach out to [name / function] for more information.