Information Security Engineer

📋 Description

• Drive the implementation, maintenance, and continuous improvement of the ISO 27001 Information
• Support SOC 2 Type II compliance efforts, including control implementation, evidence collection
• Conduct and document internal audits, manage findings, and follow up on remediation plans across
• Own and evolve the company-wide risk management program, including risk register, scoring
• Provide governance and security oversight for AWS environments, including cloud security posture
• Collaborate with Red Team and Blue Team to track, prioritize, and close technical security findings

🎯 Requirements

• Strong knowledge of ISO 27001, ISMS processes, internal audits, and control frameworks
• Hands-on experience with risk management practices, including risk identification, scoring, and
• Experience in Business Continuity Management (BCM) and disaster recovery planning
• Solid understanding of AWS services and cloud security governance, including IAM, logging, and
• Familiarity with SOC 2 Type II framework and control domains
• Understanding of data security concepts, including data classification, data inventory, and data

🎁 Benefits

• Enjoy a monthly meal allowance designed to enhance your daily routine.
• Access comprehensive private health insurance.
• Feed your curiosity with access to Spotify, LinkedIn Learning, Blinkist, MasterClass, Neoskola, and
• Level up with internal trainings covering AI fundamentals, coding, foreign languages, and a wide
• Be part of a diverse team that’s as global as it gets, where every voice is heard and 50+
• Become a Shareowner through our eligibility-based “ESOP” and own a piece of what you build.