Descripción
Responsibilities Assess the quality of documentation and implementation evidence provided by internal domains based on security guidance. Validate that provided evidence supports self-evaluation scores and is not based on assumptions. Provide structured feedback and concrete improvement points to domain owners. Build comprehensive audit dossiers and evidence registers for external verification. Interpret technical evidence including configuration exports, log files, tickets, and scan reports. Support the organization in achieving and maintaining required security maturity levels. Requirements You have 3+ years of experience in information security, compliance, or IT audit. You possess deep knowledge of security frameworks such as CyFun , ISO 27001 , or NIST CSF . You bring experience in a second-line security role focusing on validation and oversight. You're able to analyze technical data like logs , vulnerability scans , and system configurations . You are native in Dutch . Nice to Haves Experience with CyFun implementations specifically for essential organizations. Knowledge of English .