Information Security Officer (certified)
You set up the security function, advise colleagues and the management team, and check that what we agree on works in practice.
Apply nowDigital identity in Europe is changing with eIDAS 2.0. Cleverbase guides the market through that transition and provides infrastructure for European digital identity. Security is a key part of that, and one reason customers choose us.
You hold the formal role of Security Officer: a trusted role under ETSI EN 319 401, reporting directly to the management team. Engineering does the patching and configuring. You set the requirements, help shape the solutions and check afterwards that they work.
- Team Compliance & Consulting
- Hours 32–40 hours
- Location The Hague, hybrid
- Salary Market rate
What you will do
- 01Frameworks: setting standards and baselines for systems, processes and suppliers, and keeping them up to date
- 02Risks: setting up risk management and carrying out threat analyses, with attention to remote identification and key management
- 03Detection and response: organising vulnerability management, logging, detection and incident response, including signals, timeframes and responsibilities
- 04Testing programme: setting up pentests, red teaming, internal reviews and exercises, with scope and frequency
- 05Security by design: working with engineering and operations on design choices and new services
- 06Cryptography: advising on the key lifecycle, HSM configuration, certificate profiles, algorithm choices and preparation for post-quantum
- 07Management team: explaining the real risk, outlining options and giving your own advice
- 08Testing with evidence: reviews and spot checks, assessing pentest findings for exploitability and following remediation through to completion
- 09Suppliers and incidents: assessing suppliers against the requirements, taking charge during incidents and incorporating the lessons learned
- 10Awareness: making security second nature for everyone, from the colleagues who verify identities to the developers
Work that matters
What you work on reaches the top tables in Europe. At the Benelux Summit in Maastricht, we gave a live demo of the European Business Wallet to the three Benelux prime ministers: Rob Jetten, Bart De Wever and Luc Frieden.
We showed how the wallet saves entrepreneurs a great deal of paperwork when they do business across borders. The demo ran on existing eIDAS technology from Cleverbase, together with building blocks from the WE BUILD consortium. Rob Jetten's message: “The sooner, the better.”
Everyone safe online. That is what we work towards every day.
How we work
- 01
Secure by default
For us, the highest level of security is not an option but the starting point.
- 02
Short lines of communication
Developers, marketers, lawyers and designers work together.
- 03
A step every day
Agile in a regulated market: a step forward every day, always by the book.
- 04
Everyone is welcome
Our team is diverse, and that is exactly what makes us strong. You are welcome as you are.
What you bring
What we ask of you
- A relevant certificate, such as CISSP, S-CISO, CISM or GIAC. What you can do with it matters more than the certificate itself
- A few years of experience in which you shaped security yourself, for example as a security architect, security engineer, technical ISO or a pentester who wants to move to the defensive side
- Knowledge of applied cryptography, certificate profiles, key separation and HSM configuration in practice
- Enough understanding of Linux, containers, CI/CD, network segmentation and IAM to set requirements and assess implementation
- You can get to the bottom of a design, ask the right questions and weigh the answers, without having to build it yourself
- You prioritise based on risk
- You push back with well-founded arguments, including to the management team
- You write clearly, because analyses need to hold up as evidence
- Good Dutch and English, spoken and written
Nice to have
- A background as a security architect, security engineer, technical ISO or a pentester who wants to move to the defensive side
- Experience with remote identification and key management
The best view in The Hague
From our office you look out over the city's skyline. And it is easy to reach by public transport, car or bike.
Knowledge and technology
This is what you will work with. You do not need to know it all yet: you will learn a lot here.
- Applied cryptography and PKI
- Certificate profiles, key separation and HSM configuration
- Linux, containers and CI/CD
- Network segmentation and IAM
What we offer
- Salary In line with the market and your experience.
- Hybrid working Partly from home, partly at our office in The Hague.
- Staying current Time and budget for recertification.
- Direct line To the management team and researchers.
- Real influence On a technically strong product.
- 26 days of annual leave Based on full time, plus holiday allowance.
- Pension A non-contributory scheme: €0 personal contribution.
- Lunch together Catered every day, with the whole team.
- Growth A training budget for your development.
- Padel and sport Winning is allowed, taking part is what counts.
- Knowledge sessions From legislation to new technology.
- Drinks and outings We celebrate successes together.
The team behind Cleverbase
Ambitious in what we do. Sociable in how we do it.
How applying works
Clear and personal. You always know where you stand.
- 1
Send your CV
With a short motivation. Above all, tell us who you are and why this appeals to you.
- 2
Getting to know each other
A first conversation to see whether there is a click, both ways.
- 3
Second interview
A second interview, and for some roles a real-world case.
- 4
Screening and VOG
As a trust service provider, we check identity, diplomas and references, and ask for a certificate of conduct (VOG).
Does this sound like your next step?
Send your CV and a short cover letter. You do not tick every box, but think you could add value? Get in touch anyway.