← All roles

Information Security Officer

Mendix· Technical – R&D
Apply on company site
Hybrid (Rotterdam)€75k - €90kFull-timePosted 4mo ago

About the role

Information Security Officer responsible for operational security activities, compliance monitoring, audit support, and policy development to strengthen security across Mendix (Siemens Digital Industries Software) with a hybrid work model in Rotterdam.

Responsibilities

  • Control Design & Operating Effectiveness: Assess the effectiveness of existing security controls against defined risks, and flag gaps or improvement areas.
  • Compliance Monitoring & Reporting: Monitor compliance against security frameworks and regulatory requirements (e.g., SOC 1 & 2, ISO 27001, NIST, C5, ISO 42001), conduct gap assessments against applicable laws, regulations, and internal frameworks, and report status and findings to relevant partners.
  • Audit Support: Support internal and external audits by gathering, assessing, and providing vital evidence to demonstrate compliance.
  • Evidence lifecycle management: Handle collection, secure storage and archival of security evidence to ensure its integrity and availability for audits.
  • Policy & Standard Development: Research, establish, and maintain information security policies, standards, and procedures tailored to specific organizational needs and emerging threats.
  • Security Culture & Communication: Communicate security requirements, policy updates, and risk information clearly to relevant teams to support a security-conscious culture.
  • Control Implementation & Maintenance: Collaborate with applicable departments to ensure security controls are successfully implemented, maintained, and continuously optimized.

Qualifications

  • 3-5 years of dynamic experience in an Information Security, IT Audit, or Compliance role, with a working understanding of core information security principles and practices.
  • Understanding of security controls, and best practices within cloud environments (e.g., AWS, Azure, GCP). Familiarity with cloud security tools is a plus.
  • Solid grasp and practical experience with a range of information security standards, frameworks, and regulations (e.g., ISO/IEC 27001 family, GDPR, SOC 2 Trust principles).
  • Familiarity with enterprise data environments, system integrations, and software development lifecycles (SDLC).
  • An active information security certification (e.g., CISM, CISSP, ISO 27001 Lead Implementer, CompTIA Security+) is required.
  • Good analytical and problem-solving skills, with the ability to perform gap analyses and support development of practical solutions.
  • Clear written and verbal communication skills in English, able to explain security topics to both technical and non-technical audiences.
  • High level of initiative, self-direction, and the ability to work independently while also being a strong team player and collaborating optimally across departments.

Skills

Required:Information security managementCloud securityRegulatory frameworksAuditing & evidence managementCommunication

Benefits

  • Health and wellness benefits (country-specific)
  • Incentive compensation eligibility
  • Hybrid work arrangement by default
  • Benefits information available via Siemens link
Last updated Oct 21, 2026. Interested? Apply on the company site.
Mendix logo

About Mendix

Low-Code Application Development Platform | Mendix

Mendix is the fastest and easiest low-code platform used by businesses to develop mobile and web apps at scale. Try the platform for free.

Low-CodeApp DevelopmentPlatformAIAutomation
Company profileWebsite

More open roles at Mendix