Information Security Risk Officer

About the role

Join a dynamic Information Security GRC team to strengthen business operations by enforcing the Information Security Framework, conducting internal risk assessments, and collaborating with line managers on assessment scopes.

Key responsibilities

• Plan and execute technical risk assessments across IT infrastructure, applications, technologies, and third‑party services.
• Assess internal controls, processes and policies, identify deficiencies and develop remediation strategies.
• Maintain the risk register and Information Security Risk Management Program.
• Prepare comprehensive reports summarising remediation actions and provide regular security posture metrics.

Required profile

• BSc/MSc in Information Security or a related field.
• Minimum 3 years of experience in information security risk management and assessment.
• Ability to work autonomously, under pressure and communicate risks to all management levels.

Required skills

• Technical knowledge of network, host, application security, security architecture, virtualization and cloud infrastructures.
• Familiarity with security regulations and frameworks such as ISO 27005, ISO 27001, NIST CSF, NIST 800‑53, DORA and GDPR.
• Risk‑related certifications (CRISC, CGRC, CISSP) are a plus.

What we offer

• Attractive remuneration package.
• Private health insurance and corporate pension fund.
• Intellectually stimulating environment with continuous personal development and international training opportunities.