Risk & Compliancy Manager

an IT Risk consultant, you are a hands-on colleague in the information security team of the Randstad Digital Factory. This team is responsible for the full breadth of information security at Randstad, from defining Randstad’s information security policy to providing operational services that help keep Randstad secure.

They are looking for a new colleague that will be responsible for the area of policy, compliance, and risk. You’ll work with Operating Company teams, Digital Factory colleagues, and partners to support them in applying Randstad’s Information Security policy, ensuring provable compliance and management of related risks.

tasks and responsibilities

-Maintain Randstad’s information security policy, guidance, and guidelines
-Define and maintain assurance framework for the Digital Factory through adherence and reliance on industry standards like ISO27001, ISAE3402 / SOC2, and Cobit5
-Support Digital Factory product teams in implementing relevant controls, according to defined assurance framework
-Define, implement and maintain the IT risk and security assessment service process within the Randstad group
-Conducts and oversees the completion of Security by Design assessments for Digital Factory and Randstad Global products, to ensure compliance with policies, procedures, contractual and regulatory requirements
-Support our legal and sales colleagues, as the Information Security contact, answering client’s security questions and requirements
-Review and enhance Randstad’s major incident response plan
-You are the main point of contact for our Operating Companies, supporting them in your areas of responsibilities

role-related competencies

-Master Degree (or equivalent) in Information Technology
-10+ years experience in IT of which at least 5 years in security & compliance
-Knowledge of industry best practices from organizations such as the International Standards Organization (ISO), --Center for Internet Security (CIS), and the National Institute of Standards (NIST)
-Experience in IT audit, security by design, and IT risk assessments
-Manage complex issues with OpCos and DF autonomously
-Able to prepare concise reports for senior management, including C-level
-Experience performing audit procedures to validate compliance status

Extra Info

*This position is open for freelancing until they find someone for a permanent position.
*Working hours 32 - 40
*Working remotely. When it is possible to return to the office max of 3 days in the office location in Diemen is expected.