Information Security Officer

About Us:  Mendix, part of Siemens Digital Industries Software, is looking for a proactive Information Security Officer to help protect our information assets, strengthen compliance with evolving regulations, and build a security-first outlook across the organization. It's a phenomenal opportunity to make a real, visible impact on the resilience of our digital infrastructure. What you'll be doing: As an Information Security Officer, you will support a range of operational security activities, including: Control Design & Operating Effectiveness:  Assess the effectiveness of existing security controls against defined risks, and flag gaps or improvement areas. Compliance Monitoring & Reporting:  Monitor compliance against security frameworks and regulatory requirements (e.g., SOC 1 & 2, ISO 27001, NIST, C5, ISO 42001), conduct gap assessments against applicable laws, regulations, and internal frameworks, and report status and findings to relevant partners. Audit Support:  Support internal and external audits by gathering, assessing, and providing vital evidence to demonstrate compliance. Evidence lifecycle management:  Handle collection, secure storage and archival of security evidence to ensure its integrity and availability for audits. Policy & Standard Development:  Research, establish, and maintain information security policies, standards, and procedures tailored to specific organizational needs and emerging threats. Security Cul