Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 4 days ago

Chief Information Security Officer

Ockto3 open roles

Pay
€5,500 – €6,800 a month
Where
Naarden, Noord-Holland, Netherlands
Work mode
Hybrid
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowChief Information Security OfficerOckto · Naarden, Noord-Holland, Netherlands

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Ockto's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

12.9% of postings close within 7 days. Measured by our own scanner across the market. Ockto postings stay open a median of 30 days.

Share of postings closed within
  1. 2.2%1 day
  2. 4.7%3 days
  3. 12.9%7 days
  4. 21.0%14 days
  5. 35.6%30 days
  6. 58.5%60 days
This job: posted 4 days ago

Ockto median: 30 days open

The posting

Make security the reason people trust Ockto

Own security at the platform people use to share their most personal data

Every day, people use Ockto to share their identity, income, assets and bank data: when they apply for a mortgage, rent a home or take out a lease. Banks and other large organisations choose Ockto partly because of the level of assurance we offer around that data. At Ockto, security is not a support function. It is part of the product and organisational culture.

As our CISO, you make sure it stays that way as we grow. Part of that growth is adopting an AI driven operating model with strong guardrails. You own Ockto's security programme, from risk and controls to incidents, suppliers and audits. You set the standard, check that it is met, and make security measurable in a way that the whole organisation (and specifically our engineers and spec leads), clients, auditors and regulators all recognise. You do this with a real mandate and short lines to the people who decide.

What you'll do

You own the information security programme of a supervised financial company and make it work in daily practice, not just on paper. As CISO, you:

  • Own Ockto's ISMS and security policy framework, and keep our ISO 27001 certification (held since 2017) and our SOC 2 assurance current and credible.
  • Translate the risk appetite set by management into a security strategy, an annual plan and clear standards that teams can build to.
  • Keep Ockto ahead of what's coming. You track developments such as eIDAS2 and the EU Digital Identity Wallet, NIS2, the Cyber Resilience Act and the AI Act, assess what they mean for Ockto and our clients, and translate them into our security strategy and standards in time.
  • Verify and challenge. Our engineering teams operate the technical controls; you check that they work and that findings get fixed. You approve risk acceptance for serious vulnerabilities and commission penetration tests. All control owners are challenged and prepared to show evidence and reproduce controls.
  • Lead the response to security and privacy incidents, approve notifications to regulators, and make sure root causes lead to structural fixes.
  • Manage security risk in our supply chain, from onboarding new suppliers to the annual review of critical ones, in line with DORA.
  • Make sure our continuity and recovery arrangements are tested and hold up, together with Engineering.
  • Make security measurable. We judge it by how quickly and how structurally we resolve what we find, not by counting incidents.
  • Represent Ockto's security towards clients, auditors and supervisors: from a bank's due diligence questionnaire to our external audits and contact with DNB and AFM.
  • Build a security-aware culture with an awareness programme people actually remember.

Who you work with

You report to our Product & Trust Director, who sets Ockto's trust framework and risk appetite. Within that framework, the security strategy and its execution are yours. On security matters you also have a direct line to our CEO, and you are involved early in the product and architecture decisions that shape our risk. Our Information Security Officer is part of your team and runs day-to-day control monitoring with you.

You also work closely with our Engineering Director and the value stream teams that build and run the Ockto platform. They operate the technical controls as the first line; you set the requirements, verify and challenge as the second.

Outside Ockto, you work with the security, risk and procurement teams of our clients and with our external auditors. For audits you are the first line of planning, execution and communication with the auditor(s). Together with the Product & Trust Director, you are Ockto's security contact for DNB and AFM.

What you bring

You combine depth in security with the judgement to apply it pragmatically in a scale-up. We're looking for someone who:

• Has 8+ years of experience in information security, including at least 3 years leading a security function as CISO, Head of Security or similar.

• Has run an ISMS end to end and taken an organisation through ISO 27001 and SOC 2 Type II audits.

• Knows regulated financial services and works comfortably with DORA, PSD2, GDPR and supervision by DNB or AFM.

• Has solid grounding in cloud security, preferably AWS, and enough technical understanding to challenge engineers and judge designs.

• Thinks in risk: turns threats into priorities, and weighs security against cost and delivery speed.

• Communicates clearly at every level, from the management team and auditors to developers and a client's security officer.

• Is independent and principled: comfortable saying no, and good at finding the route to yes.

• Speaks and writes English fluently; Dutch is a strong advantage.

Will be a plus:

• CISSP, CISM, CCSP or ISO 27001 Lead Auditor or Lead Implementer certification.

• Experience with privacy governance and DPIAs.

• Experience leading incident response, including notification to regulators.

• Experience with third-party risk management and assurance reporting such as ISAE 3402 or ISAE 3000.

• Familiarity with digital identity, eIDAS2 and EU digital identity wallets.

• Experience governing the safe use of AI tooling in a data-sensitive environment.

What you get

You get a role with real influence on how far clients, supervisors and consumers can trust Ockto.

• Ownership of security at a company where assurance is one of the reasons clients choose us.

• A real mandate: a direct line to the CEO on security matters, a voice early in product and architecture decisions, and the final word on accepting serious security risk.

• Influence on what we build next, as Ockto grows into new markets and propositions.

• Short lines and room to shape the security function the way it should work.

• Experienced colleagues across product, engineering and compliance.

Ockto also offers:

• A good salary: between €5500,- and €6800,- per month, depending on experience

• Room and budget for personal and professional development

• A MacBook Pro and smartphone of choice

• Phone and travel allowance

• Great home and remote working facilities

• Lunch fee

• Plenty of activities, including our annual ski trip, a 1.5-day team offsite, drinks and team outings

You'll join a team that values diversity and collaboration, in a friendly, ambitious and innovative atmosphere.

About Ockto

Ockto is the leading platform for future-proof wallet services. For more than ten years we have been taking the friction out of sharing, verifying and enriching personal data, so that organisations and people can trust each other faster, based on the right information. From our office in Naarden, a team of specialists builds data-driven customer journeys that are right the first time.

Ockto. Built for trust.

Ready to join?

Do you see yourself as our new CISO? Then apply directly. After you apply, we'll contact you within five working days to discuss the role and answer your questions.

Want to know more first? Contact us at [email protected]. Curious about our company culture, core values and recruitment process, or our other vacancies? Take a look at ockto.recruitee.com.

Your data is safe

At Ockto, we only use your CV and motivation letter during the application process to assess your application. If we don't proceed, we keep your application data for four weeks.

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Ockto's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on Ockto's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    Ockto's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.