ISMS & ISO 27001 Security Process Specialist

About the role

Damen Shipyards Group is strengthening its Information Security Management System and preparing for ISO/IEC 27001:2022 certification. The ISMS & ISO 27001 Security Process Specialist will drive the design, documentation and operationalisation of a sustainable, auditable security management framework.

Key responsibilities

• Build, maintain and continuously improve the ISMS aligned with ISO/IEC 27001:2022, including policies, procedures, registers and governance documentation.
• Identify, document and formalise existing security, IT and governance processes, establishing traceability between risks, controls, owners and evidence.
• Map current practices to ISO 27001 clauses and Annex A controls, perform gap assessments and define remediation actions.
• Manage the evidence repository, coordinate audit evidence collection and support internal and certification audits.
• Develop and sustain governance structures, process ownership, version control and review cycles within the Mavim platform.

Required profile

• 4‑7 years of experience in information security, ISMS, GRC, IT service management or related fields.
• Hands‑on experience implementing or maintaining an ISO/IEC 27001‑compliant management system.
• Strong documentation, analytical and stakeholder‑engagement skills.
• Ability to work independently and across organisational boundaries, driving continuous improvement.

Required skills

• ISO/IEC 27001:2022 framework knowledge.
• Process modelling tools such as Mavim, ARIS, Signavio or Visio.
• Governance, risk and compliance platforms (e.g., ServiceNow).
• ITIL or other IT service management methodologies.