Amersfoort, Utrecht, NL (Hybrid)1 open job
Dutch mobility group running four labels and the Mobiliteitsfabriek platform for traveler access, transactions and data, with EU-hosted cloud operations and independent ISO 27001 and SOC 2 audits.
Mobility Invest Group runs the security surface of a Dutch mobility stack that quietly touches hundreds of thousands of travelers. From Amersfoort, the group operates four specialized labels - Reisbalans for business mobility, Dumoco for public-space mobility, WijMobiel for social mobility, and Ottimo for European mobility - all sitting on Mobiliteitsfabriek, a modular platform that connects travelers using cards and mobile apps to mobility providers on one side and customer systems (HR, payroll, municipal processes) on the other.
That topology is the threat model. The platform handles access management and authentication at the traveler edge, transaction processing in the middle, and integration into employer and government back-ends at the far end - a chain where a compromised credential, a bad token exchange, or a leaky integration endpoint reaches payroll and municipal data, not just trip records. Cloud operations are hosted within the European Union, and the group commits to EU data sovereignty as a design constraint rather than a marketing line.
The posture is audited, not asserted: independent third-party assessments against ISO 27001, ISO/IEC 9001:2015, SOC 2 and other security and quality standards. The technical domains in play are concrete - mobility data analytics and reporting pipelines, system integration with HR and payroll, card- and app-based traveler access, EU-hosted cloud operations. Mobility Invest Group keeps its own in-house development team and its own customer-service team in-house, which means security work lands on code and infrastructure the team actually controls, in direct collaboration with employers, governments and social organizations.
