Security Specialist, Workwize
Global IT hardware management
Open for applications
Global IT hardware management
101-200 employees
Open for applications
101-200 employees
Company mission
To unlock boundless opportunities for a global workforce.
Role
Who you are
- This is a hands-on role for someone with experience who thrives in a fast-moving SaaS environment and knows how to combine ISO/SOC discipline with practical execution
- 5+ years in security roles (Security Engineer, Security Specialist, GRC + technical, AppSec, etc
- Proven experience owning a security program and strong background in ISO27001 and SOC2 (Type II)
- Experienced supporting enterprise customers during procurement and security reviews, ideally also in a startup, scale-up, or fast-moving SaaS environment
- You can assess technical risk and turn it into prioritized, practical improvements. You focus on impact and execution, not theory
- You are reliable, autonomous and able to collaborate smoothly with engineering and leadership
- You communicate directly and to the point. You’re comfortable going deep technically when needed, but you always translate risk into clear actions
- We expect strong fundamentals in:
- IAM and least privilege
- Network and cloud security
- Encryption and secrets management
- Logging, monitoring, alerting
- Vulnerability management workflows
- OWASP Top 10 and secure development practices
- Hands-on experience with:
- Cloud security (AWS/GCP/Azure)
- SAST/DAST and dependency scanning
- Vendor risk management
- Audit cycles and evidence management
- SIEM or lightweight logging solutions
- If you’re someone who enjoys building security that actually works in a growing SaaS company, and you care about raising the level every quarter, we’d like to talk
What the job involves
- At Workwize, security is not a checkbox. It’s operational discipline. As we scale with larger customers and more complex infrastructure, we need someone who doesn’t just maintain compliance but actively reduces real risk
- As our Security Specialist, you own and execute our security program end-to-end
- You don’t write policies for the sake of it. You make sure controls actually work
- You constantly ask: are we doing this at the highest level? What can be tighter? What can be automated? What can be improved?
- Your focus is to own and strengthen our security by reducing real operational risks. You don’t wait for audits to expose gaps, you’re proactive and hands-on
- We already have ISO27001 and SOC2, and your role is to take them further, making our security stronger, more practical, and truly effective
- You own the operational side of our security program across engineering, IT, and business:
- Continuously improve our security posture across product and internal systems
- Keep policies, controls, and risk registers alive and relevant
- Identify gaps and close them
- Run periodic security checks: access reviews, vendor reviews, incident simulations
- Make sure security controls are not just documented but actually working
- Own and elevate ISO27001 & SOC2:
- Own audit readiness and evidence collection
- Improve control effectiveness year over year
- Coordinate engineering, IT, ops, and legal during audits
- Respond to enterprise security reviews and questionnaires
- Own third-party risk management and vendor security reviews
- Strengthen application & cloud security
- You work closely with Engineering and Platform to:
- Embed secure SDLC practices
- Run security reviews for key changes
- Drive threat modeling for new features
- Own vulnerability management (triage, SLAs, verification)
- Improve AppSec tooling (SAST, DAST, dependency scanning, secret scanning)
- Strengthen IAM, logging, monitoring, key management, and cloud baselines
- You will be the security anchor in the company. Meaning you will:
- Act as the go-to person for security questions
- Train teams in practical, lightweight best practices
- Communicate clearly and directly with engineers and leadership
- Stay calm and structured during incidents or urgent customer escalations
Our take
Workwize is a procurement and management platform tailored specifically to meet the evolving needs of remote and hybrid working. At its core, Workwize prioritises customisation, flexibility, and transparency, enabling companies to effectively manage and procure the essential technologies and tools vital for their workforce.
Based in the Netherlands, Workwize has swiftly garnered acclaim, serving fast-growing startups and established enterprises alike within its native landscape. With its appeal extending globally, securing players such as Netflix to leverage its services within Europe. For a young company born out of the pandemic, Workwize has charted an impressive trajectory, underlining the enduring relevance of hybrid and remote work models well into the 2020s.
Backed by multiple rounds of funding, Workwize has embarked on an ambitious expansion journey across Europe, capitalising on its existing client base spanning fifteen countries. Furthermore, strategic investments in workforce augmentation underscore a promising phase of growth for the company, poised to solidify its position as a frontrunner in shaping the future of workplace management and procurement solutions.
Kirsty
Company Specialist at Welcome to the Jungle
Insights
2% employee growth in 12 months
Company
Funding (last 2 of 3 rounds)
Jan 2025
$15m
SERIES A
Jan 2022
$1.8m
SEED
Total funding: $17.3m
Company benefits
- Dynamic Work Place: Work flexibly with hybrid and remote options, plus the ability to work from anywhere for up to four weeks each year.
- Diverse, Global Team: Collaborate with a diverse team across cultures, unified by English, and anchored by our Amsterdam headquarters.
- Heart of Amsterdam: Enjoy the centrally located headquarters in Amsterdam with scenic views of the iconic canals.
- Home oFfice Budget: Receive a MacBook and a home office budget to ensure you’re set up for success anywhere.
- Monthly Team Events: Connect and celebrate with regular team events, meet-ups, and milestone celebrations in Amsterdam..
- Time to Recharge: Take advantage of vacation policies tailored to your region, ensuring work-life balance wherever you are.
Company HQ
Grachtengordel-West, Amsterdam, Netherlands
Leadership
Victor Dik
(Co-Founder & CCO)Previously a Planning and Portfolio Manager at Vodafone Ziggo, a Domestic Relationship and Recruitment Manager at Knowledge 2 Share Foundation.
Sebastiaan Scholten
(Co-Founder & CTO)Previously an Investment Banking Intern at Lazard and eCommerce Director at MIPACHA.
Michiel Meyer
(Co-Founder & CEO)Previously a Business Growth Manager & Head of Addity at Buckaroo, Head of Department at Addity Payments, Consultant at McKinsey & Company and FinTech Developer at CoInvestor.
Share this job
View 20 more jobs at Workwize