We are looking for a Chief Information Security Officer to join our IT team based in Hoofddorp, Netherlands.
About Barentz
Barentz is a leading global life science and specialty performance ingredients distributor. The company sources branded specialty ingredients from leading manufacturers worldwide and its ingredient experts provide value-added technical support which includes pre-mixing, blending, ingredient formulation, and ingredient testing from its state-of-the-art, customized formulation centers and application laboratories in EMEA, Americas and Asia-Pacific.
Established in 1953, Barentz has operations in more than 70 countries with a strong presence in Europe and North America and a rapidly growing network in Latin America and Asia-Pacific. With a turnover of €2.5 billion, the company employs over 2,600 people worldwide and serves more than 25,000 customers. For more information, visit: www.barentz.com.
About this role
Job Purpose
The CISO is responsible to continue building an international organization and related programs/strategies in the areas of Security, Compliance, and Privacy for Barentz.
The role will oversee security supporting all Barentz operations across corporate businesses. We are looking for a seasoned Information Security leader who has the ability to interact with the overall Management Board and a broad set of functional leaders. Reporting line is to the Chief Information Officer and the individual will be a member of the IT Leadership team and the overall cross-functional European Management Team.
It will be key to connect with cross-functional groups and determine the staging and delivery of technical project schedules based on staff resources, vendor capabilities, and budget. Lead compliance efforts (PCI, GDPR, etc.) for the IT organization implementing appropriate controls to ensure compliance with industry, and country, information security regulations. Oversee the implementation of technical software and equipment solutions across Barentz operations. Develop and champion Security and IT Security programs to improve the execution, operations, and risk management efforts in IT.
- Lead IT Security & Compliance Strategy, support Barentz Privacy Strategy, Programs & Initiatives
Continually develop and modify existing programs and strategies to keep up with the latest security & compliance events, threats, and regulations. Monitor all potential security, compliance & privacy issues across Barentz business entities. Ensure that the latest security updates are implemented in a timely manner and in accordance with defined protocols. Work on security strategies to stay ahead of future security threats and review vendor software capabilities and solutions.
- Champion Security & Compliance across the company
Visible lead and advocate for Security & Compliance with the top leadership of the company and – together with other departments – own/drive the different employee awareness programs.
- Support & Lead Business Programs & IT Initiatives
Work across functions (IT, Legal, Internal Audit, Internal Controls, Finance, HR, etc.) to define & deliver projects using staff resources, vendor capabilities, and available budgets. Oversee the initial fact-finding and system requirements to develop a project plan (includes planning, development, testing, implementing, and training). Negotiate contracts and development work with software companies on security-related projects. Ensure software solutions work with our current systems and applications and work on any required modifications or system updates as required.
- IT Systems & Infrastructure Deployment at a diverse set of locations
Oversee the implementation of security, compliance & privacy solutions across our operations. Act as a technical expert on cross-functional teams when it comes to recommending system/software updates or vendor selection related to IT security infrastructure across our operations. Ensure that all implemented technical solutions have the security precautions for the business entity or department.
- Manage IT Compliance Programs
Lead a cross-functional team in the design, implementation, operations, and reporting of technical controls and processes to ensure organizational compliance with industry, country, and regulatory requirements. These requirements include but are not limited to the GDPR program, support of Annual Privacy assessments, and audit compliance.
- People Management
Responsible for ensuring that the information technology organization is properly resourced and that all team members are engaged and meeting performance expectations. Partner with the team and provide performance management feedback and coaching to continue to grow team members’ technical business acumen and consulting best practices. Provide strategic direction and assistance with technical solutions and plans to staff as required. Responsible for leadership, development, and succession planning for the department. Primary responsibility for recruitment, training, performance evaluation and feedback, and career development for all levels of the team. Set priorities for the team and clearly communicate objectives so senior management initiatives are met.
About You
Are you experienced, ambitious, and showing analytical thinking, strong initiative, planning skills, and solid but fair judgment? A team player able to prioritize work, learn new concepts and, at times, multitask in a fast-paced environment. Do you enjoy solving technical challenges in complex environments and executing large-scale deployments with skilled professionals from multi-tiered disciplines?
Required experience.
- Strong management and communications skills to interface with Executive Committees/Board, Finance, Internal Audit, HR, Sales and Marketing on a global level
- Strong presentation, organizational, analytical, and problem-solving skills.
- Ability to effectively work with technical and business departments in or outside of the enterprise.
- Knowledge of Global General Data Protection Regulations (GDPR) and key data protection laws and regulations
- Very strong understanding across all aspects of software development and related applications incl. knowledge of ITIL and COBIT frameworks
- Ability to investigate new information security methodologies and communicate ideas.
- Ability to develop, publish, and implement Corporate Enterprise Security Policies and Procedures
- Experience implementing the concept of Privacy by Design
- Experience with Network and Application vulnerability testing tools such as Qualys and AppScan
- Deep experience across the technology spectrum with exceptional technical knowledge spanning networks/infrastructure, security, application software, desktops, servers, and web architecture.
- 10+ years’ experience in IT
- 10 years of direct experience in information security in an international environment
- Application experience spanning, Finance, ERP, eCommerce, Direct Sales, and Retail
Education
- IT security certification – CISSP, CISM, and/or GIAC certification
- Privacy certification – IAPP (CIPM/IT, CIPM/EU)
- Bachelor's Degree or equivalent experience
Why Barentz?
Barentz is a great company to work for, with a positive and warm company culture, and a One Team, One Goal mentality. It is an inspiring multinational company, with fast-growing market segments and global coverage.
- Competitive package including 27 days annual leave + bonus structure.
- An inspiring multinational company in a fast-growing and innovative business
- Flexible and hybrid working environment.
- Fringe benefits like private health care, private pension schemes, company Fitness scheme, etc.
Interested?
If you feel excited reading the above and want to join our journey, please send your resume in English, by using the apply button. Any questions regarding this position, please contact Jill.Lan@barentz.com
Job ID: No.126