Information Security & Compiance Officer

in Hybrid (Gent Muide-Sifferdok)

Billit is a fintech SaaS platform providing compliant electronic invoicing and secure financial workflow infrastructure for businesses, governments and financial institutions.

Founded in Belgium in 2014, we've grown into one of the leading electronic invoicing platforms in our homeland and are expanding internationally as well, supporting hundreds of thousands of businesses and processing tens of millions of invoices annually.

Behind our product is a close-knit team of people who believe digitization, efficiency and humanity go hand in hand.

https://www.billit.eu/en-int/

Are you our pragmatic link between compliance and the day-to-day?

As a fintech SaaS company, Billit operates in a heavily regulated environment - think DORA and ISO 27001. That’s why we’re expanding our team with someone who:

• operationally translates our security and compliance obligations into day-to-day practice

• and makes good governance real and workable in a scale-up that takes quality seriously - without turning it into bureaucratic overhead.

What does an Information Security & Compliance Officer do at Billit?

You’re the operational engine behind our security and compliance work. You coordinate, document, and monitor processes. You make sure that what’s written on paper is actually followed and acted upon. You report to our Chief Quality Officer and serve as the bridge between strategy and execution.

In practice:

• You coordinate and follow up on incoming security reports, making sure they reach the right teams on time.

• You monitor SLA’s, follow-up deadlines, and the progress of security cases.

• You manage our ISO 27001 documentation and ensure the quality, completeness, and consistency of all security and audit information.

• You coordinate internal and external penetration tests, including planning, communication, and administrative follow-up.

• You serve as the first point of contact for general security and compliance questions - both internally and externally.

• You follow up on scan results and ensure findings are properly registered and handled.

• You report on open findings, KPIs, and remediation progress.

• You support audits and compliance activities and actively contribute to the continuous improvement of our security processes.

• You optimize and document operational security processes and work instructions - pragmatically and scalably.

• For those familiar with the Three Lines of Defense model: you work within our 1st line of control quality team. On the front line, hands-on and boots on the ground.

Who are you?

• You have at least a few years of relevant experience in an operational compliance or security role, preferably in a regulated environment (fintech, SaaS, healthcare, government…).

• Ideally, you’re already familiar with DORA, ISO 27001, and/or GDPR.

• Relevant certifications (ISO 27001 Lead Implementer, CISM, CRISC…) are a real asset, though not required.

• You preferably have demonstrable experience managing security documentation and supporting audits. If you don’t have that specific experience yet but bring strong analytical thinking, drive, and a hunger to learn fast - don’t let that stop you from applying.

• You communicate fluently in English and preferably also in Dutch.

What’s in it for you?

• Impact: you help build a mature security and compliance practice at a fast-growing Belgian fintech company.

• Growth: room for personal development and an environment that rewards initiative.

• An ambitious company with a lot of drive and an international mindset.

• Flexible hours and a hybrid work arrangement that fits the way you work best.

• A salary that reflects your talent and expertise.

Ready to help take Billit to the next level? Talk soon!

Download attachment(s)

Proudly hosted by

Privacy Policy

In order to ensure high-quality recruitment and selection processes we collect your personal data with the help of Jobtoolz, our online application platform.

The provision of this personal data is therefore a necessary condition to complete the application process.

When collecting and processing your personal data, we always comply with the regulations on the protection of personal data as well as the General Data Protection Regulation ("AVG" or GDPR).

For more information on how we process your personal data, we would like to refer you to our privacy policy.

Would you like to know more about the privacy policy of Jobtoolz Click here

Cancel interview

Are you sure you want to cancel this interview?

Reschedule interview

Are you sure you want to reschedule this interview?