Compliance & Security Officer

Compliance is not paperwork. It’s trust, made visible.

Most companies use AI to move faster. 
We believe speed without guidance changes nothing.

We design collaborative AI that strengthens human judgment instead of replacing it.

By connecting powerful technology to human potential, we ensure people don’t lose control but regain it.

Our clients don't just execute faster. They adapt in real time. They make better decisions. And they build resilience into the core of their organizations. Organizations that thrive because they change.

We are Yuma, one of the fastest-growing digital transformation groups in the Benelux. We were built differently. Bringing together leading expertise in AI, data, technology and creativity to help organizations solve complex challenges and move forward with confidence.

To keep us audit-ready and make compliance simply part of how we work, we're looking for a Compliance & Security Officer.

What you’ll do

Yuma is on a growth journey. With ambitious plans to further strengthen our position in Mission Critical IT — and a regulatory landscape that tightens by the quarter — we’re looking for a Compliance & Security Officer who brings structure, keeps us audit-ready, and makes compliance something our teams use.

In this role, you are responsible for our own management systems and regulatory posture. You safeguard our ISO 9001, 14001, 27001 and NEN 7510 certifications, keep us on track for NIS2, DORA and GDPR, and prepare us for what’s coming with the EU AI Act and the EU Data Act. You work close to the business: with engineers, service delivery, HR and the management team.

You are the go-to person for compliance and security within Yuma. You translate frameworks and regulations into policies, processes and controls that fit how we work, and you keep them alive through audits, reporting and awareness. You advise the management team on risk, and you make sure evidence is there when a client, auditor or regulator asks. Besides that, you’ll

Own our management systems

• Own and maintain our GMS and ISMS: policies, risk register, controls and internal audits under ISO 9001, 27001 and NEN 7510 

• Manage certification and surveillance audits for ISO 27001, NEN 7510, ISO 9001 and ISO 14001, from preparation to closing findings 

Stay ahead of regulation 

• Drive our NIS2 and DORA readiness and keep our reporting and register obligations in order

• Safeguard GDPR compliance: processing register, DPIAs, data subject requests and processor agreements

• Strengthen Yuma to be compliant with the EU AI Act and EU Data Act, and translate what they mean for our services and our clients

Keep the organisation secure

• Act as the link to security operations on incidents, vulnerabilities and follow-up actions

• Run supplier and vendor security assessments, and support security questions in client tenders

• Build cyber awareness across the organisation through training, simulations and clear communication

• Report on compliance status, risks and improvement plans to the management team

You have three to five years of experience in compliance, information security or risk, and you’ve seen a certification audit from the inside. You combine structure with pragmatism: you know the standards, but you’d rather have a control that people follow than a policy nobody reads. You’re comfortable explaining a regulation to the management team in the morning and discussing findings with an engineer in the afternoon.

• Affinity with IT infrastructure, cloud and managed services

• Strong analytical skills and a structured way of working, while keeping the big picture in view

• Able to write a policy that is clear to a non-specialist

• Certification such as ISO 27001 Lead Implementer or Lead Auditor, CIPP/E, CISM or CISSP is a plus

• Proactive, independent and comfortable holding people to agreements

• Team player who can motivate, inspire and handle resistance

Additionally, you bring:

• HBO work and thinking level

• Excellent communication skills in Dutch and English, politically aware and analytical

• At least 3 years of experience in a similar role

• Hands-on experience with ISO 9001 and 27001 and preferably NEN 7510

• Working knowledge of NIS2, DORA and GDPR; interest in EU AI Act and EU Data Act.

Why Yuma?

At Yuma, you’re given space. Space to grow, to shape your own path, and to build a compliance function the way you think it should work. We have a strong focus on knowledge sharing, and you’ll work with colleagues known for their craftsmanship across Cloud, Managed Services, Data & AI, Security and Infrastructure.

• A compliance function you build, not one you inherit

• Direct access to the management team and a mandate across the organisation

• Internal training, knowledge sessions and active knowledge sharing

• Support in obtaining the certifications that matter for your career

• Speaking at meetups or conferences? Go for it.

What you’ll get from us

A great team where you’re given the freedom to innovate. You’ll also collaborate with and gain insight into highly professional and impactful organizations. Yuma builds sustainable partnerships: with clients and with you.

You can also expect:

• Marktconform salary

• A strong pension plan

• Mobility plan or lease car

• High-end laptop.

About Yuma

Yuma is an end-to-end digital transformation group in the Benelux. AI, data, and software development are key drivers of change, but we believe there is no digital transformation without human transformation. That’s why we combine a people-centric mindset with a hands-on approach and best-in-class expertise.

Our teams build smart, responsible solutions that solve real-world challenges and create meaningful impact: for organizations and the people behind them. Security and compliance are part of that from the first design decision onwards, which is exactly why this role matters.