Information Security Specialist
EUR 26,400-44,400 per year
Used Tools & Technologies
Not specified
Required Skills & Competences
Tag name is followed by "@" symbol and proficiency level value.
About proficiency levels:
- 1-2 — basic awareness. Minimal hands-on experience, and a rudimentary understanding of the technology's purpose;
- 3-6 — daily use. Comfortable and regular usage, capable of handling common tasks and challenges related to the technology;
- 7-9 — you are an expert, you can teach others, you know all the pitfalls and tricks;
- 10 — exceptional knowledge, comprehensive understanding, and adeptness in all aspects of the technology, including advanced problem-solving. Think twice before claiming or demanding such level.
Security @ 3
Communication @ 3
GDPR @ 3
Due Diligence @ 3
Audit @ 3
Compliance @ 3
Change Management @ 3
- 1-2 — basic awareness. Minimal hands-on experience, and a rudimentary understanding of the technology's purpose;
- 3-6 — daily use. Comfortable and regular usage, capable of handling common tasks and challenges related to the technology;
- 7-9 — you are an expert, you can teach others, you know all the pitfalls and tricks;
- 10 — exceptional knowledge, comprehensive understanding, and adeptness in all aspects of the technology, including advanced problem-solving. Think twice before claiming or demanding such level.
Details
The Information Security Team is responsible for information security governance, compliance, risk management, and audit readiness across the organization. The team works closely with technical, legal, product, and business teams to ensure security requirements are understood, implemented, documented, and continuously improved.
This role is suitable for someone who wants to grow in information security governance, audits, customer security assurance, risk management, and compliance frameworks such as ISO/IEC 27001, SOC 2, HIPAA, PCI DSS, NIS2, CRA, GDPR, and others.
Responsibilities
- Support the implementation and maintenance of the company’s information security governance and compliance framework
- Assist with internal and external information security audits, including evidence collection and follow-up on findings
- Participate in security reviews and help track corrective actions
- Support business and technology initiatives by helping identify applicable information security and compliance requirements
- Help maintain information security documentation, policies, procedures, registers, and audit evidence
- Support customer security assurance activities, including security questionnaires, RFPs, and due diligence requests
- Collaborate with technical and business teams on improvements to information security processes and controls
- Support security awareness and training activities
Requirements
- Basic understanding of information security principles and common compliance frameworks (e.g., ISO/IEC 27001, SOC 2)
- Interest in information security governance, compliance, audits, and risk management
- Strong organizational skills and attention to detail
- Ability to communicate clearly with both technical and non-technical stakeholders
- Analytical mindset and ability to identify gaps, risks, and practical improvements
- Sense of ownership and ability to complete assigned tasks independently
- Willingness to learn, ask questions, and improve continuously
- Good written and verbal communication skills in English
Nice to Have
- Previous experience supporting audits, risk assessments, customer security questionnaires, policy documentation, or compliance activities
- Familiarity with one or more security/compliance frameworks such as ISO 27001, SOC 2, HIPAA, PCI DSS, NIS2, CRA, GDPR
- Understanding of SaaS environments, cloud services, and topics like access management, incident management, vulnerability management, change management
- Relevant certification such as ISO 27001 Foundation, ISO 27001 Internal Auditor, Security+, or similar
Salary Range
- Gross Salary: 2200 - 3700 EUR / Month (specified by employer)