Strength. Care. Growth
You will know we are the right place for you, if you are driven by:
- Opportunities to learn and build your career.
- Meaningful work in a stable and fast-paced company.
- Diversity of people, projects, and platforms.
- A supportive, fun, and inspiring place to work.
This job can be performed by all countries within our A1 footprint.
Role Overview:
The Information Security Expert ensures the secure and compliant operation of A1 Group’s hybrid environments, leading security initiatives and continuously enhancing processes and technologies to protect the organization and its customers.
Role insights:
- Advise the Security Delivery Center, other Delivery Centers, and business units across A1 Group on the implementation of internal security policies, ISO standards, and regulatory frameworks, including NIS2.
- Evaluate the effectiveness of security controls against internal policies, international standards, and applicable regulatory requirements.
- Review and interpret regulatory requirements and support the development of security policies, frameworks, and documentation.
- Collaborate with system owners and business stakeholders to develop remediation plans and address identified security gaps.
- Support audits, regulatory inspections, and bid management activities by providing relevant documentation, evidence, and expert insights.
- Contribute to advisory metrics and dashboards, reporting on compliance status, trends, and risk exposure.
- Conduct security risk assessments of various security solutions and provide recommendations on appropriate security measures.
- Manage, review, and continuously improve security policies, standards, and procedures.
- Promote continuous improvement, knowledge sharing, and cross-group collaboration.
What Makes You Unique:
- Bachelor's degree in Information Security, Computer Science, Information Technology, Business Informatics, Organizational Science, or a related field.
- At least 3 years of experience in compliance, IT or security auditing, risk management, security consulting, cybersecurity, or a related field.
- Strong understanding of ISO 27001/27002 and other relevant security standards.
- Familiarity with NIS2, DORA, GDPR, and other applicable regulatory frameworks.
- Experience managing audit and assurance findings and collaborating with stakeholders to address identified gaps.
- Solid understanding of security controls, governance models, and risk management principles.
- Excellent analytical, documentation, and communication skills.
- Good understanding of network security, web applications, and security vulnerabilities.
- Experience working with IT infrastructure, cloud environments, or security technologies.
- Fluent in English.
Job code: AIT010P311
Job classification: 11 - (Global Level)
