Skip to main content
Ecare logo
Ecare

Manager Information Security & Compliance

4 × 10hr days€5,500 – €7,500/moHybrid · Enschede, Overijssel, Netherlands

Thousands of healthcare professionals rely on our software and the sensitive data processed within it every day. At the same time, we are developing new applications for practitioners and exploring how AI and data can responsibly add value to healthcare. This is only possible if information security, compliance and continuity are demonstrably well arranged — not just on paper, but in day-to-day practice.

A lot is already in place, but information, processes and responsibilities are still fragmented, and existing findings must be demonstrably followed up. As Manager Information Security & Compliance, you bring oversight, coherence and progress. You provide direction to a small specialist team and help Ecare grow safely and responsibly.

What will you do?

You are responsible for the further professionalisation and positioning of Information Security & Compliance within Ecare. You are not starting from zero: there are policy documents, processes, audit reports and continuity plans, some of which need to be re-examined, made more accessible and more firmly embedded in the organisation.

Within this, you have three assignments:

  1. Demonstrably controlling risks, audits and findings

You bring risks and priorities into view, coordinate internal and external audits, and ensure that findings are actually followed up and embedded.

2. Establishing one integrated and working management system

You connect standards (such as ISO 27001 and NEN 7510), risks, processes, responsibilities and evidence into one practical system that becomes part of daily operations — not a separate approach per standard.

3. Anchoring Information Security & Compliance in the organisation

You ensure that ownership lies where it belongs: with the board, management and process owners. You set frameworks, monitor, advise and escalate where necessary, but do not take over their responsibility.

In concrete terms, you will work on, among other things:

  • directing assurance and compliance matters, including ISAE 3402 and the Dutch Cybersecurity Act;

  • implementing, testing and improving Business Continuity, incident and crisis management;

  • increasing security awareness through targeted training and communication;

  • involving Information Security & Compliance in a timely manner in new technology, products, AI and data use;

  • directing adjacent product compliance such as MDR;

  • substantively representing Ecare towards customers, auditors and other stakeholders.

You do not need to be the deepest expert in every area yourself. You know what is needed, ask the right questions and organise additional expertise when required.

How you work

You report directly to the Director of Finance and Risk Management and advise the board on risks, priorities and necessary investments. You lead the Compliance Coordinator and also work closely with Engineering, Product, HR, Finance, Sales and other process owners.

This is not a role in which you carry out all measures yourself or only produce policy: you ensure that it is clear what must happen, why, by whom and when. You distinguish between main and secondary matters, so that colleagues are not overloaded with rules without important risks being made smaller than they are.

For this you need, alongside substantive knowledge, authority. You are accessible and connecting, but not non-committal — you hold people to account when agreements are not kept. You move smoothly between a Security Engineer, Product Owner, board member, customer and auditor, and reduce complex topics to clear choices.

What makes this role interesting

Ecare grew from an headstrong challenger into one of the larger players in Dutch healthcare software. We want to retain that entrepreneurial mentality, while our position calls for more coherence and professional risk management. In this role:

  • you get direct influence over a business-critical domain and enable safe, responsible innovation with AI and data;

  • you provide direction to a small specialist team and get room to shape processes, systems and team composition;

  • you work on current issues around information security, business continuity, legislation and MDR;

  • you substantively represent Ecare towards customers, auditors and other stakeholders, and can deploy external expertise where needed;

  • you get room to invest in your own development and, as an experienced professional, to take a next step towards broader strategic responsibility.

A monthly gross salary between € 5.500 and € 7.500 based on 40 hours per week, depending on your knowledge and experience. An employment contract of 32 hours is negotiable.

We are not looking for someone who knows every standards framework by heart, but for a sturdy professional who creates overview and gets the organisation moving.

You have:

  • extensive experience with information security and compliance within ICT, software or SaaS;

  • demonstrable knowledge of ISO 27001 and preferably NEN 7510;

  • experience with audits, risk management and practically translating standards and policy into concrete measures;

  • knowledge of business continuity and incident management;

  • sufficient substantive and personal authority to advise the board, professionals, customers and auditors;

  • experience with or demonstrable suitability for leading a small professional team;

  • excellent communication skills in Dutch.

Experience in healthcare ICT or with ISAE 3402, the Cybersecurity Act or MDR is welcome, but not a hard requirement. More important is that you quickly grasp new topics and organise specialist knowledge when needed.

Apply now