Your New Role

As a Senior Information Security Specialist, you will support the business as the first line of contact. You will play a vital role in embedding information security practices, controls, and culture within the organisation. You will collaborate with relevant stakeholders to find sustainable solutions to connect our IT systems, perform root cause analysis, and find solutions with the support of strong IT colleagues.

Responsibilities

• Maintain and enhance the information security framework.
• Conduct risk and control assessments, advising on improvements to security controls and practices.
• Identify and mitigate information security risks in collaboration with business units and technologists.
• Evaluate exposure to various security risks and readiness to address them effectively.
• Provide guidance on information security principles, controls, and secure coding practices.
• Integrate security measures into the Software Development Lifecycle (SDLC) and DevOps pipelines.
• Ensure a robust assurance and reporting framework, including KPIs and KRIs.
• Participate in internal and external risk assessments and coordinate mitigation measures with stakeholders.
• Collaborate across functions to establish sustainable security approaches and alignments.

Requirements

• Bachelor’s degree in a related field.
• Minimum 3 years of experience working with information security and business continuity.
• Experience in information security processes.
• Understanding security pitfalls in both on-premise and cloud software development and how to avoid them.
• Understanding of tools and practices that facilitate a DevSecOps approach, such as automated security scanning and continuous integration/continuous deployment (CI/CD) security.
• Solid ability to translate complex security and continuity issues into business risks.
• Relevant certifications (CISM, CISA, CRISC, etc.).
• Fluency in English (spoken and written).

What You'll Get in Return

• Opportunity to participate in highly recognised projects.
• Excellent work environment.
• Integration into a dynamic team.
• Continuous training opportunities with certification in various technologies.
• Career development and growth opportunities.
• Possibility of a hybrid work model.