# Senior Information Security Officer | Work

[Testendouble](https://gurify.com/jobs?q=Testendouble) · Amsterdam, Netherlands · Posted 3 weeks ago

Senior

[Security](https://gurify.com/jobs/security)

[Apply on the original posting → (opens in a new tab)](https://job-boards.greenhouse.io/testendouble/jobs/8860217002)

## Job description

### Your Role in Our Story:

ACT is strengthening its data, technology and AI capabilities as we build a more integrated digital platform alongside our core environmental commodities trading and market-making business. This transformation is commercially driven, enabling us to scale, deepen client relationships and support increasingly complex and digital markets.

As Senior Information Security Officer, you will own ACT’s enterprise information security strategy and governance at Group level, spanning our core operations, emerging digital businesses and client-facing technology platforms. You will define the security risk appetite, lead our response to an evolving threat landscape, and ensure security and resilience are embedded by design as our technology landscape develops.

Working across business and technology leadership, you will translate commercial ambition into a pragmatic and scalable security posture that protects our systems and data while maintaining the trust of clients, counterparties and regulators. In essence, your role involves:

### Strategy & Governance

- Own the Group-wide information security strategy and roadmap across ACT’s core market-making business and digital and client-facing platforms, aligned with business goals and industry frameworks such as ISO 27001 and NIST CSF. Define and maintain ACT’s cyber risk appetite.

- Establish and lead security governance, including policies, standards and control frameworks, with clear accountability across the Group. Report on security posture and material incidents to executive leadership and, where relevant, the Board.

### Client Platforms & Secure-by-Design

- Embed security-by-design into new products and client platforms, partnering with Data, Architecture and Commercial teams to ensure emerging digital capabilities are secure from inception, while acting as a credible security voice to clients and counterparties.

- Oversee application, product and SaaS security, embedding security throughout the software development lifecycle for internal and client-facing platforms, and assessing third-party services handling ACT and counterparty data.

### Risk & Resilience

- Lead enterprise security risk management, including risk assessments, vulnerability management and third-party/supply-chain risk, driving timely mitigation across core and digital environments.

- Direct incident preparedness and response, coordinating detection, containment, eradication and recovery, while continuously strengthening incident and crisis-management plans.

### Infrastructure & Emerging Technology

- Secure ACT’s cloud and infrastructure through Zero-Trust-aligned controls, including identity and access management, segmentation and encryption, across a hybrid and multi-platform environment.

- Govern emerging technology and AI security, extending security oversight to AI and data platforms, including model and data-exposure risks and AI-enabled threats, as ACT expands its use of AI.

### Compliance & Leadership

- Ensure regulatory and compliance alignment, including GDPR, DORA and relevant sector obligations, advising the business on required adaptations and coordinating audits and certifications.

- Lead the security function and strengthen security culture across the Group, developing the team, raising security awareness, and acting as ACT’s primary authority and trusted advisor on cyber security to executives and business leaders, working alongside existing teams and capabilities.

### Your Expertise:

To be successful in this role, we are looking for candidates with the following qualifications and attributes:

- A Bachelor’s degree in Information Security, Computer Science or a related field. A relevant Master’s degree is an advantage.

- 10–15 years of progressive experience in information security and cybersecurity, including at least 5 years in a senior security role, with ownership of enterprise security strategy, governance and risk management.

- Broad security leadership experience across incident response, cloud and infrastructure security, product/application security and regulatory compliance. Experience securing client-facing platforms or digital products is highly valuable.

- Experience within trading, financial services, commodities or another data-intensive and regulated environment is highly advantageous.

- Strong knowledge of security frameworks and standards, including ISO/IEC 27001, NIST Cybersecurity Framework and CIS Controls, with practical experience implementing them.

- Good understanding of data protection, regulatory and compliance requirements, including GDPR, DORA and standards such as SOC 2.

- Professional certifications such as CISSP, CISM or CISA, or equivalent, are highly desirable.

- Strong analytical, communication and stakeholder-management skills, with the ability to translate complex security risks into clear business implications and advise technical teams, executives, business stakeholders and clients.

If you meet these criteria and are ready to contribute your expertise to a dynamic and challenging environment, we encourage you to apply.

##

**Live in Testendouble’s hiring system.** Read from the company's own applicant tracking system, not reposted from a job board — so it's a real, open requisition rather than an ad that outlived the role.

We remove it as soon as it disappears at source.

## More jobs like this

- FL [Senior Security Engineer, Detection & Response](https://gurify.com/job/senior-security-engineer-detection-response-at-flexport-606ae08d1e0a) Flexport · Amsterdam, Netherlands · 2 weeks ago
- FL [Senior Security Engineer, Corporate Security](https://gurify.com/job/senior-security-engineer-corporate-security-at-flexport-90232267f77b) Flexport · Amsterdam, Netherlands · 2 weeks ago
- CA [Lead Security Engineer](https://gurify.com/job/lead-security-engineer-at-catawiki-ded0f7644020) Catawiki · Amsterdam, Netherlands · 3 weeks ago
- WE [Senior Security Engineer](https://gurify.com/job/senior-security-engineer-at-wetravel-3f868b4d24ac) Wetravel · Amsterdam · 5 weeks ago
- WE [Senior Security Engineer](https://gurify.com/job/senior-security-engineer-at-wetravel-db0353704e79) Wetravel · Amsterdam · 5 weeks ago
- HA [Chief Information Security Officer (CISO)](https://gurify.com/job/chief-information-security-officer-ciso-at-hawk-413579fda46d) Hawk · Munich · 3 weeks ago

```json
{"@context":"https://schema.org/","@type":"JobPosting","title":"Senior Information Security Officer | Work","description":"\u003Ch3\u003EYour Role in Our Story:\u003C/h3\u003E\u003Cp\u003EACT is strengthening its data, technology and AI capabilities as we build a more integrated digital platform alongside our core environmental commodities trading and market-making business. This transformation is commercially driven, enabling us to scale, deepen client relationships and support increasingly complex and digital markets.\u003C/p\u003E\u003Cp\u003EAs Senior Information Security Officer, you will own ACT\u2019s enterprise information security strategy and governance at Group level, spanning our core operations, emerging digital businesses and client-facing technology platforms. You will define the security risk appetite, lead our response to an evolving threat landscape, and ensure security and resilience are embedded by design as our technology landscape develops.\u003C/p\u003E\u003Cp\u003EWorking across business and technology leadership, you will translate commercial ambition into a pragmatic and scalable security posture that protects our systems and data while maintaining the trust of clients, counterparties and regulators. In essence, your role involves:\u003C/p\u003E\u003Ch3\u003EStrategy \u0026amp; Governance\u003C/h3\u003E\u003Cul\u003E\u003Cli\u003EOwn the Group-wide information security strategy and roadmap across ACT\u2019s core market-making business and digital and client-facing platforms, aligned with business goals and industry frameworks such as ISO 27001 and NIST CSF. Define and maintain ACT\u2019s cyber risk appetite.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EEstablish and lead security governance, including policies, standards and control frameworks, with clear accountability across the Group. Report on security posture and material incidents to executive leadership and, where relevant, the Board.\u003C/li\u003E\u003C/ul\u003E\u003Ch3\u003EClient Platforms \u0026amp; Secure-by-Design\u003C/h3\u003E\u003Cul\u003E\u003Cli\u003EEmbed security-by-design into new products and client platforms, partnering with Data, Architecture and Commercial teams to ensure emerging digital capabilities are secure from inception, while acting as a credible security voice to clients and counterparties.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EOversee application, product and SaaS security, embedding security throughout the software development lifecycle for internal and client-facing platforms, and assessing third-party services handling ACT and counterparty data.\u003C/li\u003E\u003C/ul\u003E\u003Ch3\u003ERisk \u0026amp; Resilience\u003C/h3\u003E\u003Cul\u003E\u003Cli\u003ELead enterprise security risk management, including risk assessments, vulnerability management and third-party/supply-chain risk, driving timely mitigation across core and digital environments.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EDirect incident preparedness and response, coordinating detection, containment, eradication and recovery, while continuously strengthening incident and crisis-management plans.\u003C/li\u003E\u003C/ul\u003E\u003Ch3\u003EInfrastructure \u0026amp; Emerging Technology\u003C/h3\u003E\u003Cul\u003E\u003Cli\u003ESecure ACT\u2019s cloud and infrastructure through Zero-Trust-aligned controls, including identity and access management, segmentation and encryption, across a hybrid and multi-platform environment.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EGovern emerging technology and AI security, extending security oversight to AI and data platforms, including model and data-exposure risks and AI-enabled threats, as ACT expands its use of AI.\u003C/li\u003E\u003C/ul\u003E\u003Ch3\u003ECompliance \u0026amp; Leadership\u003C/h3\u003E\u003Cul\u003E\u003Cli\u003EEnsure regulatory and compliance alignment, including GDPR, DORA and relevant sector obligations, advising the business on required adaptations and coordinating audits and certifications.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003ELead the security function and strengthen security culture across the Group, developing the team, raising security awareness, and acting as ACT\u2019s primary authority and trusted advisor on cyber security to executives and business leaders, working alongside existing teams and capabilities.\u003C/li\u003E\u003C/ul\u003E\u003Ch3\u003EYour Expertise:\u003C/h3\u003E\u003Cp\u003ETo be successful in this role, we are looking for candidates with the following qualifications and attributes:\u003C/p\u003E\u003Cul\u003E\u003Cli\u003EA Bachelor\u2019s degree in Information Security, Computer Science or a related field. A relevant Master\u2019s degree is an advantage.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003E10\u201315 years of progressive experience in information security and cybersecurity, including at least 5 years in a senior security role, with ownership of enterprise security strategy, governance and risk management.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EBroad security leadership experience across incident response, cloud and infrastructure security, product/application security and regulatory compliance. Experience securing client-facing platforms or digital products is highly valuable.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EExperience within trading, financial services, commodities or another data-intensive and regulated environment is highly advantageous.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EStrong knowledge of security frameworks and standards, including ISO/IEC 27001, NIST Cybersecurity Framework and CIS Controls, with practical experience implementing them.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EGood understanding of data protection, regulatory and compliance requirements, including GDPR, DORA and standards such as SOC 2.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EProfessional certifications such as CISSP, CISM or CISA, or equivalent, are highly desirable.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EStrong analytical, communication and stakeholder-management skills, with the ability to translate complex security risks into clear business implications and advise technical teams, executives, business stakeholders and clients.\u003C/li\u003E\u003C/ul\u003E\u003Cp\u003EIf you meet these criteria and are ready to contribute your expertise to a dynamic and challenging environment, we encourage you to apply.\u003C/p\u003E\u003Cp\u003E##\u003C/p\u003E","identifier":{"@type":"PropertyValue","name":"Gurify","value":"senior-information-security-officer-work-at-testendouble-ac0a248fa2fd"},"url":"https://gurify.com/job/senior-information-security-officer-work-at-testendouble-ac0a248fa2fd","datePosted":"2026-10-01","validThrough":"2026-12-12T23:59:59Z","hiringOrganization":{"@type":"Organization","name":"Testendouble","sameAs":"https://job-boards.greenhouse.io/testendouble"},"directApply":false,"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressCountry":"NL","addressLocality":"Amsterdam"}}}
```

```json
{"@context":"https://schema.org/","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Jobs","item":"https://gurify.com/jobs"},{"@type":"ListItem","position":2,"name":"Netherlands","item":"https://gurify.com/jobs/netherlands"},{"@type":"ListItem","position":3,"name":"Senior Information Security Officer | Work","item":"https://gurify.com/job/senior-information-security-officer-work-at-testendouble-ac0a248fa2fd"}]}
```