Information Security Assurance Expert

Responsibilities

• Plan and perform information security assurance reviews, including control design and effectiveness assessments
• Assess security controls based on frameworks such as ISO/IEC 27001, ISO/IEC 42001, NIST CSF, and NIST AI RMF
• Identify and document control gaps, non-conformities, and risk exposures
• Provide subject-matter support to internal and external audit functions
• Collaborate with risk, compliance, and IT teams to track remediation of identified gaps
• Prepare clear, concise, and well-evidenced assurance reports for senior stakeholders
• Provide guidance to entities and departments in building control maturity
• Support continuous improvement of the IS assurance program, including methodology and automation

Requirements

• Master’s degree in Information Security, Computer Science, or a related field
• Minimum 3 years of experience in cybersecurity assurance, control assessment, or information security governance
• Solid understanding of cybersecurity controls, governance frameworks, and assessment methodologies
• Familiarity with regulatory requirements such as ISO/IEC 27001, NIS 2, GDPR, and EU AI Act
• Strong communication and reporting skills
• Fluent English

Preferred Qualifications

• Professional certifications such as CISA, CRISC, CISSP, or ISO 27001/42001 Lead Auditor/Implementer
• Experience working in complex, multinational environments

Benefits

• Flexible working hours and 30 days of holiday
• Comprehensive training via internal or external centers
• Health days, medical care, and employee assistance programs
• On-campus gym, sports classes, and discounted canteen meals
• Company pension plan and discounted wholesale shopping
• Support for childcare and holiday camps