Information Security Analyst – NIS2 & Compliance

Responsibilities

• Assess the quality of documentation and implementation evidence provided by internal domains based on security guidance.
• Validate that provided evidence supports self-evaluation scores and is not based on assumptions.
• Provide structured feedback and concrete improvement points to domain owners.
• Build comprehensive audit dossiers and evidence registers for external verification.
• Interpret technical evidence including configuration exports, log files, tickets, and scan reports.
• Support the organization in achieving and maintaining required security maturity levels.

Requirements

• You have 3+ years of experience in information security, compliance, or IT audit.
• You possess deep knowledge of security frameworks such as CyFun, ISO 27001, or NIST CSF.
• You bring experience in a second-line security role focusing on validation and oversight.
• You're able to analyze technical data like logs, vulnerability scans, and system configurations.
• You are native in Dutch.

Nice to Haves

• Experience with CyFun implementations specifically for essential organizations.
• Knowledge of English.