Information Security Officer - GRC

Key responsibilities

• Apply security and compliance frameworks, such as ISO 27001, NIS2, and GDPR, to support the development and continuous improvement of TU/e's information security governance framework.
• Assess current security practices across scientific and service departments, identifying risks, strengths, and opportunities for improvement.
• Translate business, research, and technical requirements into pragmatic security policies, standards, and guidelines.
• Advise stakeholders on information security, privacy, risk, and compliance topics, balancing security requirements with operational and research needs.
• Facilitate discussions and workshops with stakeholders to establish common security principles and promote consistent ways of working across the university.
• Drive awareness, understanding, and adoption of security policies and standards through effective communication and stakeholder engagement.
• Support teams during the implementation of security requirements and provide practical guidance on policy interpretation and application.
• Collaborate with architects, product teams, researchers, privacy specialists, and other stakeholders to ensure a coherent and risk-based approach to security governance and compliance.

Why this role is unique
Eindhoven University of Technology operates in a highly dynamic environment where cutting-edge research, open collaboration, education, and information security come together. As an Information Security Officer, you will help shape policies and governance frameworks that protect the university while enabling innovation and academic freedom.