Information Security Analyst

Want to protect the technology behind one of the world’s most iconic brands? As our client gears up for NIS2 and major digital transformation, they are building a brand-new Information Security team of three specialists in Amstelveen. We are looking for an Information Security Specialist who brings deep technical credibility but thrives in an orchestration role—bridging the gap between global strategy and practical, local execution across IT and OT environments. The Challenge You will report to the IT/Security Manager and work alongside external partners and global HQ to roll out a unified security framework across multiple European subsidiaries. This is a high-leverage role: you will need the technical depth to challenge solutions and architect controls, combined with the vendor management skills to ensure third-party partners execute perfectly. Your Day-to-Day Technical Vendor Governance: Act as the primary technical point of contact for third-party security vendors. You will manage their deliverables, ensure technical controls are implemented properly, and hold partners accountable to high standards. Hands-on Technical Oversight: Apply deep technical knowledge to guide the implementation and maintenance of security controls across both IT and OT (production) environments. Vulnerability & Incidents: Run technical security assessments, coordinate remediation with external partners, and lead incident response efforts. Secure Architecture: Review IT project designs to ensure they are secure by design before passing them to execution teams. Collaboration: Partner with local IT teams and shared service centers to ensure consistent security across Europe. What You Bring The Hybrid Skillset: You have a strong technical foundation but have evolved into a role where you direct and manage how vendors execute the work, rather than just configuring tools yourself. Experience: 3+ years of hands-on technical security experience, ideally with some exposure to managing or overseeing external service providers. Tech Stack: Practical, deep knowledge of EDR, SIEM, IDS/IPS, and vulnerability scanners. Frameworks: Familiarity with NIST, CIS, or NIS2 requirements. Communication: Ability to translate technical risks into business impact and work seamlessly with multicultural teams and external suppliers. Certifications: CISSP, CISM, or CEH are a big plus. Industry Fit: Background in FMCG, manufacturing, production, logistics, or consumer electronics. Note: This role is focused on operational/production environments and is not a match for someone with a purely banking or insurance background. Culture & Working Style Quality First: Structured, methodical, and focused on documentation and stability over quick shortcuts. Framework-Driven: Room for creativity and initiative, but always aligned with global HQ frameworks. International: A supportive, culturally rich environment with plenty of European collaboration. Why Join? You get the best of both worlds: the stability and prestige of a massive global brand, combined with the agility and impact of a newly formed local team. You’ll have a direct hand in shaping the European security landscape for years to come. Benefits (some) Up to 90000 EUR OTE per year (OTE consists of holiday allowance and and a performance bonus roughly equivalent to a month's salary. Salary and holiday allowance is roughly 83500 EUR per year) Full-time is 37.5 hours per week Non-contributory pension 26 vacation days Working from home allowance €2.40 per day Internet allowance €35 net per month OV Business card (only work-related) Please note: This is a permanent, full-time employment position. Our client is unable to consider B2B contractors or freelancers for this role. Thank you!