Junior/Medior Information Security Officer (ISO 27001)

MX3D is looking for a proactive and detail-oriented Junior/Medior Information Security Officer (ISO 27001) to strengthen our information security and help ensure our organization meets the requirements of ISO 27001. You will be responsible for maintaining and improving MX3D’s Information Security Management System (ISMS), coordinating security-related activities, and helping colleagues across the organization work securely. You will play an important role in protecting our information, our technology, and the industrial systems we deliver to customers, while supporting MX3D’s continued growth. Whether you are at the start of your career or already have some experience in information security: you do not need to be an expert yet. You will grow into this role with structured training and coaching from an experienced external ISO 27001 consultancy.

A bachelor’s or master’s degree in IT, information security, computer science, or a related field, or equivalent relevant experience A genuine interest in information security, risk management, and compliance A structured and analytical way of working, with strong attention to detail Technical affinity: you are comfortable discussing networks, cloud services, access control, and industrial systems with IT and Engineering The ability to translate security requirements into practical solutions that work for the business Strong communication skills and the ability to engage colleagues across different teams and levels of the organization A proactive attitude and eagerness to learn, with the drive to grow into ownership of our ISMS Excellent English communication skills; Dutch is a plus

Work experience in information security, IT security, risk management, compliance, or a related field Knowledge of ISO 27001 and what it takes to maintain an effective ISMS Experience with risk assessments, security policies, internal audits, and compliance documentation An understanding of information security controls, incident management, access management, and business continuity Experience preparing for or supporting ISO 27001 audits Relevant certifications, such as ISO 27001 Lead Implementer, Lead Auditor, or Internal Auditor, CISM, or CISSP Familiarity with NIS2, the Cyber Resilience Act, or IEC 62443 Hands-on experience in IT, system administration, cloud, or OT/industrial networks Most importantly, we are looking for someone who takes ownership, thinks pragmatically, and understands how to balance information security with the needs of a growing technology business.

At MX3D, you will work with an international team on technology that is changing the way metal parts are designed and manufactured. In 2026, MX3D was honored with the FME STERK Employer of the Year Award , recognizing the work and people behind our organization. We offer: A structured development path with an external ISO 27001 consultancy, including a recognized certification such as ISO 27001 Lead Implementer The opportunity to grow into ownership of our ISO 27001 framework A market-competitive salary 27 vacation days + 104 ADV hours PME pension Annual company getaway Friday afternoon drinks and regular team activities Soup Fridays Discounts, travel benefits and insurance offers More than 600 online learning modules through OZone Opportunities for training and professional development A flexible and international working environment Interested? If you are passionate about information security, eager to learn, enjoy turning standards into practical solutions, and want to help protect an innovative technology company, we would like to hear from you.

MX3D is based in Amsterdam and is at the forefront of large-scale 3D metal printing. We developed Robotic Wire Arc Additive Manufacturing (WAAM) and were the first company to 3D print a fully functional stainless steel pedestrian bridge. Today, our M1 and MX Metal AM Systems help companies produce industrial-grade metal parts in-house. As we continue to grow and work with customers and partners in demanding industries internationally, information security is becoming increasingly important. New European regulation, such as NIS2 and the Cyber Resilience Act, will also raise the bar for the security of the machines and software we deliver. We are looking for someone who can help us maintain a strong security culture, manage risks, and ensure our security and compliance processes remain effective and aligned with ISO 27001. What you will do In your first months, you will work closely with our external ISO 27001 specialist, supporting risk assessments, documentation, and audits. Step by step, you will take ownership of the ISMS and the activities below. Maintain, coordinate, and continuously improve MX3D’s Information Security Management System (ISMS) in accordance with ISO 27001 Ensure information security policies, procedures, and guidelines are up to date and implemented across the organization Identify, assess, and manage information security risks in collaboration with relevant teams Coordinate risk assessments, internal audits, management reviews, and follow-up actions Prepare for and support external ISO 27001 audits and certification activities Monitor compliance with applicable information security requirements, contractual obligations, and relevant legislation Help prepare MX3D for upcoming European cybersecurity regulation, such as NIS2 and the Cyber Resilience Act, together with Engineering and Product Coordinate the handling of information security incidents and product vulnerabilities, including reporting, investigation, and corrective actions Maintain the risk register, Statement of Applicability, and other required ISMS documentation Raise awareness of information security and organize training for employees Work with IT, Engineering, Operations, HR, and Management to embed security into daily processes and business activities Assess security risks related to suppliers, external partners, and other third parties, including third-party and open-source components in our products Support Sales with customer security questionnaires, due diligence assessments, and security requirements in contracts Support business continuity planning, incident response, and recovery procedures Monitor security controls and follow up on corrective and preventive actions Advise colleagues and management on information security risks and practical mitigation measures Keep up to date with developments in information security, ISO 27001, and relevant security standards and regulations What we are looking for