Information Security Officer

About Us: 

Mendix, part of Siemens Digital Industries Software, is looking for a proactive Information Security Officer to help protect our information assets, strengthen compliance with evolving regulations, and build a security-first outlook across the organization. It's a phenomenal opportunity to make a real, visible impact on the resilience of our digital infrastructure.

What you'll be doing:

As an Information Security Officer, you will support a range of operational security activities, including:

• Control Design & Operating Effectiveness: Assess the effectiveness of existing security controls against defined risks, and flag gaps or improvement areas.
• Compliance Monitoring & Reporting: Monitor compliance against security frameworks and regulatory requirements (e.g., SOC 1 & 2, ISO 27001, NIST, C5, ISO 42001), conduct gap assessments against applicable laws, regulations, and internal frameworks, and report status and findings to relevant partners.
• Audit Support: Support internal and external audits by gathering, assessing, and providing vital evidence to demonstrate compliance.
• Evidence lifecycle management: Handle collection, secure storage and archival of security evidence to ensure its integrity and availability for audits.
• Policy & Standard Development: Research, establish, and maintain information security policies, standards, and procedures tailored to specific organizational needs and emerging threats.
• Security Culture & Communication: Communicate security requirements, policy updates, and risk information clearly to relevant teams to support a security-conscious culture.
• Control Implementation & Maintenance: Collaborate with applicable departments to ensure security controls are successfully implemented, maintained, and continuously optimized.

What you'll bring:

We're looking for someone with a proven foundation in information security and a proactive, diligent approach.

Skills & Qualifications:

• Experience: 3-5 years of dynamic experience in an Information Security, IT Audit, or Compliance role, with a working understanding of core information se

• 1. Dismissing low-code platforms as mere toys unsuitable for serious enterprise applications
• 2. Failing to understand governance and architecture control in decentralized development
• 3. Overcomplicating straightforward automation challenges

I empower businesses to build enterprise-grade applications 10x faster by bridging citizen developers and IT governance.