Head of Information Security

Who we are

at Catawiki we come across exceptional objects such as these every day.

Catawiki is the leading online marketplace to buy and sell special objects. We offer over 75000 special objects in auction every week each reviewed and selected by one of Catawikis hundreds of inhouse experts specialised in Art Design Jewellery Fashion Classic Cars Collectables and many more.

Weve sold 10 million unique items to date and its our mission to become the worlds most popular auction destination for special objects.

Were an innovative pioneering and fastgrowing scaleup. If you think you can make a difference to our team go ahead and apply.

About the role and team

We are looking for a Head of Information Security to lead and manage our cybersecurity function.

As the leader of the team youll be responsible for driving our efforts toward ensuring that our customers and employees stay safe: you will do so leveraging automation being an advisor and evangelizing best security practices. As a manager you will use your experience and technical acumen to lead the security function coaching and mentoring your security engineers.

To convey a sense of scale here are a few numbers:

• Around 120 people are in the engineering function
• 12 crossfunctional agile teams grouped into 4 teams of teams
• Around 40 microservices ruby on rails golang
• Around 10 million unique users per month
• Up to 1520k HTTP requests per second served

And plenty of bots and bad actors that are trying to breach our perimeter steal our customers financial information and commit fraud.

What youll do

• You are responsible for the entire security teams project success and overall protection of user data and intellectual property.
• Youll maintain security policy compliance spearhead security projects and manage technical staff.
• Develop and implement a comprehensive information security strategy aligned with objectives and regulatory requirements.
• Conduct risk assessments to identify vulnerabilities and potential threats in the organizations systems and processes.
• Directly oversee security systems and infrastructure monitoring promptly identifying and responding to security incidents.
• Assess and oversee the security aspects of thirdparty vendors and service providers.
• Liaise with Product Development Platform Legal and Data Protection to advise on best practices and influence their roadmap

All in a work environment where people from all backgrounds can thrive and grow. Your impact will help millions of people buy and sell the objects of their dreams.

Who you are

• 2 years of experience as a manager
• 8 years of experience in the security domain
• Deep understanding of technical security controls requirements and emerging security trends.
• Experience of implementing security detection and response controls within one the major cloud providers (AWS GCP Azure)
• Ability to translate technical security issues to a large audience and gather their support.
• Experience with corporate security controls on MacOS.
• Excellent communication skills in English including communicating well across different functions and different levels in an organization.

Bonus if you

• Experience in scaleups and ability to cope with ambiguity and changing business requirements
• Handson experience implementing security controls (i.e. bot detection WAF) for an environment deployed on GCP using a major vendor such as Akamai Cloudflare and similar
• Experience with security regulations such as ISO27001 NIST or CIS Controls

Where youll be

This role is based in our Amsterdam office the Netherlands and reports to our VP Engineering

Heres what we can offer you

This is your chance to join our mission to fulfill peoples passions as part of a young and dynamic organization. Youll be part of an enthusiastic highly motivated team of 800 Catawikians.

Additionally you can expect:

• A challenging role in a diverse international and fastgrowing organisation with over 50 nationalities.
• Regular fun activities both on and offline e.g summer parties boat rides and regular team events.
• Great secondary benefits including a holiday allowance and a fantastic pension plan paid for by Catawiki.
• Hybrid ways of working between home and office. We offer remote and activitybased working suited to the team and individual responsibilities
• We care about our teams wellbeing and offer a holistic wellbeing programme including our Employee Assistance Programme offering clinical services singlesession therapy wellness support and more.
• Tailored learning and development opportunities to support your personal and professional growth;

We want to help you celebrate special occasions in life by:

• Provide employees with a 100 EURO Catavoucher upon joining and 50 EURO birthday Catavouchers;
• Extra days of annual leave for work anniversaries at 3 5 8 and 10 years;
• Additional leave allowances for important life events such as moving engagement & marriage;
• Each year Catawikians get an additional days leave to Pursue their Passion!

Please note that our benefits offering changes depending on which country you are employed in. For our countryspecific offering please ask your recruiter.

Our commitment to you

Catawikis eclectic team represents an international and intergenerational mix of people from different professional and cultural backgrounds. We foster an inclusive and queerfriendly work environment committed to making every Catawikian feel welcomed and empowered. Whatever your story we encourage you to bring your unique perspective to the table.

Catawiki stands with Ukraine and encourages people displaced by the current conflict to apply. In addition to the several initiatives weve launched were open to ideas on ways we can continue to support the humanitarian effort.

Our offices and way of working

We have sensational offices in Amsterdam Groningen Paris and our newest office in Lisbon. Most of our employees are within commutable distance of one of our office locations and enjoy a hybrid work model. This means we expect you to be in the office 2 out of 5 days roughly 40% of your working time to collaborate and connect with each other. The exception is of course if the job description specifically states that the role is 100% remote as some experts and sales positions are.

Interested

Apply directly with an English CV and cover letter by submitting your information at the bottom of this page. By submitting your application you agree to .

If youre excited about this role but your past experience doesnt align perfectly with every qualification in the job description we encourage you to apply anyways. You may be just the right candidate for this or other roles.