h3About VITO /h3 /brpVITO is a leading European research organisation conducting independent, applied technological research with the ambition to create a positive impact for a society in transition. Building on scientific expertise, infrastructure and digital solutions, VITO works with governments, industry and knowledge partners across three impact domains: materials, climate and living environment. /p /brh3Context /h3 /brpAs a research‑driven organisation, VITO works daily with sensitive data, intellectual property (IP), prototypes, algorithms and experimental environments. Protecting these assets against malicious threats—while enabling collaboration and innovation is essential to VITO’s mission. /p /brh3Role Purpose /h3 /brpThe Security Officer is responsible for the bend‑to‑end security of VITO’s critical research assets /b against malicious internal and external threats. The role combines bstrategic leadership /b with bpragmatic execution /b: defining the security vision and architecture, ensuring its effective implementation across the organisation, and embedding security as an enabler of innovation. /p /brpThe Security Officer leads the bVITO Security Office (VSO) /b and acts as the central coordinator for all security‑related domains, working closely with ICT, Facilities, Human Capital, Legal Procurement, Risk Management and Executive Management. The VSO reports directly to the CEO. /p /brh3Key Responsibilities /h3 /brol /brli /brpbSecurity Governance Leadership /b /p /br /li /br /ol /brul /brli /brpDefine and maintain an integrated security strategy and roadmap aligned with VITO’s research activities and risk profile. /p /br /li /brli /brpLead the VITO Security Office and ensure clear roles, responsibilities and collaboration across security domains. /p /br /li /brli /brpAct as the primary point of contact for security matters for research departments and corporate services. /p /br /li /brli /brpRepresent VITO towards national, European and international authorities (e.g. law enforcement, intelligence services, defence and corporate security bodies). /p /br /li /br /ul /brh32. Policy, Architecture Standards /h3 /brul /brli /brpDevelop, maintain and enforce security policies, principles and standards. /p /br /li /brli /brpDefine security requirements for research laboratories, pilot lines, ICT networks, systems, platforms and data, focusing on protection against malicious threats. /p /br /li /brli /brpDrive the security architecture in close collaboration with the Information Security Officer and other stakeholders, ensuring coherence across digital, physical and organisational security. /p /br /li /br /ul /brh33. Implementation Operational Oversight /h3 /brul /brli /brpEnsure that security measures are beffectively implemented /b, adopted and maintained within the organisation—without centralising all execution. /p /br /li /brli /brpCoordinate physical security measures and ensure their integration with digital security controls. /p /br /li /brli /brpProvide direction on Zero Trust principles and Identity Access Management. /p /br /li /brli /brpOversee incident management, security monitoring and follow‑up actions. /p /br /li /br /ul /brh34. Risk, Audit Assurance /h3 /brul /brli /brpCoordinate security risk assessments and threat modelling together with the Risk Manager. /p /br /li /brli /brpSupport and coordinate internal and external security audits, initiate required remediation actions and monitor their timely completion. /p /br /li /brli /brpProvide assurance to customers and partners that VITO can execute strictly confidential and sensitive projects. /p /br /li /br /ul /brh35. Knowledge Security Awareness /h3 /brul /brli /brpSafeguard knowledge security, IP protection and security requirements in contracts and collaborations. /p /br /li /brli /brpEnsure correct handling of confidential research information across the organisation. /p /br /li /brli /brpRaise awareness and build security maturity through targeted communication and sensitisation initiatives. /p /br /li /br /ul /brh3Profile requirements /h3 /brul /brli /brpMaster’s degree or equivalent through experience. /p /br /li /brli /brpProven experience in information security and cybersecurity; familiarity with frameworks such as ISO 27001, NIS2 or equivalent. /p /br /li /brli /brpSolid experience in physical security and integrated security management. /p /br /li /brli /brpStrong analytical skills with the ability to operate both strategically and hands‑on. /p /br /li /brli /brpExcellent communication and advisory skills; able to act decisively under incident pressure. /p /br /li /brli /brpFluent in English and Dutch. /p /br /li /br /ul /brh3Assets /h3 /brul /brli /brpExperience in RD, academic or industrial research environments. /p /br /li /brli /brpFamiliarity with IP‑sensitive environments, data classification and knowledge security. /p /br /li /brli /brpExperience with cloud environments and research platforms. /p /br /li /
