IT Governance, Risk and Compliance (GRC) Specialist

HOYER, a traditional, independent family-run company since 1946, is one of the leading bulk logistics service providers worldwide, and as a specialist it possesses comprehensive know-how in the supply of complex services, and a special proximity to customers. Comprehensive solutions are developed and implemented in European and worldwide bulk logistics, especially for the chemicals, foodstuffs and gas sectors. Around 3.800 staff in more than 115 countries support customers to be even more successful with well thought-out logistics solutions in their respective markets. HOYER has at its disposal about 2,200 trucks, 2,600 road tankers, 50,100 IBCs, 37,600 tank containers and numerous logistics installations with depots, cleaning plants and workshops.
For the area Information Technology at HOYER Global Transport B.V. based in Botlek-Rotterdam we are looking for an IT Governance, Risk and Compliance (GRC) Specialist who will work with us to shape the future of logistics.

• Continuous improvement to meet regulations and further development of IT GRC standards, procedures and processes.
• Support of internal- and external audits (i.e. Finance, 9001 and 27001).
• Perform activities related to the (privileged) access control of business applications.
• Be proactive in consulting with data- and system owners on information security issues.
• Advise on security measures and based on risk assessments.
• Maintain an overview of, and contribute to, the information security risk management process and the development and implementation of information system security plans, in close cooperation with the CISO.
• Support the management in monitoring, dashboarding and reporting (i.e. yearly Security Report).
• Perform activities to make sure HOYER is following legislation in the area of information security management (i.e. NIS2, KRITIS).

• Successfully completed studies or training with an IT-related focus.
• Proficient in areas like ITIL, COBIT, NIST, ISO 27001, ISO 9001, and ISO 19011; certificates in these areas desirable (i.e., CISSP, CISM, CISA, ISO27001 auditor).
• Several years of professional experience with information security control systems.
• Fluent in English and Dutch, German is a pré.
• Strong consulting and solution expertise, openness to change as well as hands-on mentality.
• Independent and structured way of working, motivated to learn and develop.
• Strong communication and teamwork skills.
• Experience in the logistic sector or desire to know more about it.

• Demanding and responsible tasks
• Appreciative, team-oriented corporate culture
• Good additional benefits
• Personnel development that promotes further and additional education.