Group Information Security Officer

Join our team as the Group Information Security Officer, where you will design and implement information security standards across our business operations. You will lead the Information Security Office, conduct risk assessments, manage security incidents, and drive security awareness and training across the organization. The ideal candidate will have over 8 years of experience in information security management, a degree in computer science or a technology-related field, and a professional information security certification.

Missions

• Design and implement Group information security standards across business operations, and monitor performance.
• Direct the Information Security Office, including information security representatives from auction brands and the Group Risk and Compliance team.
• Own and continuously develop TBA’s information security strategy, policies, and standards across all regions and brands.

Profil recherché

- To be successful, you should have expert analytical skills and in-depth knowledge of information security best practices to prevent and resolve a wide range of security threats

- Top candidates will also be excellent communicators, able to train and educate our teams in various information security topics

- To monitor performance against Group information security standards, you have a solid level of leadership and management skills allowing you to closely cooperate with Group and Regional functions

- Self-driven and enjoy working together towards a common goal

- Ability to educate a technical as well as a nontechnical audience about various security measures

- Excellent problem-solving and analytical skills

- Effective verbal and written communication skills in English

- Degree in computer science or a technology-related field

- Solid understanding of relevant laws, regulations and standards related to information security (amongst which NIS2 and ISO27001/2)

- Professional information security certification

- More than 8 years of experience in information security management, including conducting risk assessments, setting companywide standards, actively creating awareness, and managing incidents