Information Security Manager

Nexent Bank is a respected international niche bank offering a dynamic portfolio of products to corporate and retail clients. With over 1,000 colleagues in seven countries and headquartered in Amsterdam, we proudly serve our international client base while strengthening our organization. We aim to be an adaptive, efficient, and sustainable bank, focusing on achieving investment-grade status and further embedding digitalization.

At Nexent Bank, we empower passionate people to achieve their maximum potential. We believe in ethical banking, care for customers need and proactivity, having a strong adherence to values such as responsibility, collaboration, learning and development.

About the Role

We are looking for an experienced Information Security Manager to join our Banking IT team. This role is responsible for strengthening the bank's information security framework, ensuring compliance with regulatory requirements, and driving security risk management initiatives across the organization.

The successful candidate will combine security governance, risk management, and hands-on security expertise to oversee IT controls, coordinate security testing activities, lead awareness programs, and manage the Access Control function while working closely with IT, Risk, Compliance, and external security partners.

Key Responsibilities

• Lead and coordinate the organization's Information Security processes and controls framework .
• Manage the Access Control Team , ensuring effective user access management and compliance with security policies.
• Coordinate and oversee IT Controls Testing activities, ensuring deficiencies are identified, tracked, and remediated.
• Perform cybersecurity risk assessments and support the implementation of risk mitigation plans.
• Contribute to the development, maintenance, and continuous improvement of Information Security policies, standards, and procedures.
• Ensure compliance with applicable regulations and security frameworks, including ISO 27001, GDPR, SWIFT, and DORA .
• Coordinate and manage external penetration testing engagements , ensuring findings are addressed and reported appropriately.
• Plan and execute internal phishing simulation campaigns , analyse results, and drive security awareness initiatives across the organization.
• Support security incident management activities and collaborate with IT teams to investigate and resolve security-related events.
• Prepare and present regular reports on information security risks, testing results, incidents, and compliance status to management.
• Act as a trusted advisor for information security matters across business and technology teams.

Required Qualifications

• 6+ years of experience in Information Security, Cybersecurity, IT Risk Management, or a related field.
• Previous experience in the banking or financial services industry is highly preferred.
• Solid experience with IT Controls Testing , security governance, and regulatory compliance.
• Practical knowledge of Information Security processes , risk assessments, and security control frameworks.
• Experience coordinating penetration testing , vulnerability remediation, and security assurance activities.
• Hands-on experience in conducting or managing security awareness and phishing simulation programs .
• Strong understanding of regulatory and industry standards, including ISO 27001, GDPR, SWIFT, NIST, COBIT, and DORA .
• Bachelor's degree in Information Technology, Cybersecurity, Computer Science, or a related discipline.
• Professional certifications such as CISSP, CISM, CRISC, or CISA are considered a strong advantage.

Technical Skills

• Good understanding of Data Loss Prevention (DLP) solutions and related security controls.
• Strong knowledge of Microsoft Active Directory and Microsoft Entra ID (Azure AD) .
• Experience with Identity and Access Management (IAM) concepts and privileged access controls.
• Knowledge of vulnerability management, security monitoring, and incident response processes.
• Understanding of security architecture principles and security control implementation.

What We Are Looking For

• Strong ownership and accountability.
• Excellent communication (RO & EN) and stakeholder management skills.
• Ability to balance regulatory requirements with business needs.
• Analytical thinking and sound decision-making capabilities.
• A proactive mindset and passion for continuous improvement.
• High integrity and ability to build trust across the organization.