Working at Mercell
At Mercell, we're on a mission to revolutionise public procurement, making it accessible and effortless for everyone involved. Imagine a world where public buyers and visionary suppliers come together seamlessly to make a great deal easier and shape the future. That's what we're all about.
With a dynamic culture built on continuous growth, trust, and collaboration, Mercell offers an environment where your talents can thrive. You will be part of an international environment with ambitious and dedicated colleagues who are passionate about what they do and supported to be themselves.
Your Mission
As an Information Security Analyst at Mercell, you will be part of the Trust & Security team and report to the Head of IT Audit. We are a team of dedicated professionals responsible for ensuring Mercell meets high standards of security, privacy, and regulatory compliance. We support the wider organization by implementing practical controls, managing risks, and enabling secure business operations.
As our new Information Security Analyst, you will have an exciting and impactful role where you'll help drive customer trust, support compliance efforts, and contribute to the continuous improvement of our security practices. You will play a key part in shaping how Mercell manages customer security interactions and meets external expectations around certifications, standards, and risk management.
Core Responsibilities
Lead and support customer due diligence activities, including completing security and compliance sections of RFPs, responding to questionnaires, and participating in customer calls to address security-related inquiries.
Contribute to the maintenance and improvement of IT compliance programs aligned with standards such as ISO/IEC 27001, ISO/IEC 27701, ISAE 3000, SOC 2, and BSI C5.
Manage and execute security and compliance projects independently, ensuring clear organization, timely delivery, and effective communication with stakeholders.
Collaborate cross-functionally across Legal, IT, Engineering, and Compliance teams to drive security initiatives, ideally leveraging experience in a SaaS environment.
Support risk management and incident response processes, including documentation, coordination of follow-ups, and contributing to root cause analysis.
Required Qualifications
Solid understanding of information security and IT compliance frameworks (e.g. ISO/IEC 27001, 27701, SOC 2, ISAE 3000, BSI C5).
Strong organizational skills with the ability to manage multiple projects and priorities effectively.
Previous experience with customers and taking part in customer due diligence activities, completing RFPs, etc.
Clear and professional communication skills, with the ability to work cross-functionally and engage with external stakeholders.
Proficiency with tools such as Jira, Confluence, Google Workspace, etc.
Preferred Qualifications
Experience working in a SaaS or cloud-based environment with a focus on security and compliance.
Exposure to risk assessments, incident response coordination, or audit preparation within an IT or compliance context.
Proficiency with tools such as Jira, Confluence, Google Workspace, etc.
Start date: As soon as possible
Duration: Full Time, Permanent
Workplace type: Flexible working hours / Hybrid remote
Location: Utrecht, the Netherlands
Application Deadline: 10.08.2025. However, do not wait to submit your application - we will read applications and talk to potential candidates as we receive them.
What we Offer
As a growing technology company, we are committed to taking care of our employees through initiatives such as hybrid work to support your work-life balance, health and insurance plans (may differ per country/office), pension plans, paid parental leave, social happenings and competitive salary packages. Please see https://career.mercell.com/post/our-perks-benefits to get more insights on what to expect of perks, benefits and culture when joining Mercell.
Has this sparked your interest?
Then we can't wait to have you join our mission and look forward to receiving your application!
We may carry out background checks on applicants to verify information that appears on CVs and other documentation. This background check is carried out by an external party and is not carried out without the consent of the applicant. Current applicants will receive further information about this.