Information Security Specialist

About the role

The Information Security Specialist ensures that the organization’s security processes align with standards, legal requirements, and industry best practices. This role analyses security performance, reports risks, and drives improvement actions to support corporate objectives.

Key responsibilities

• Manage and coordinate penetration testing, vulnerability management, and cyber threat intelligence, tracking mitigation actions and reporting outcomes.
• Monitor information security incidents and breach notifications, supporting analysis and preventive measures.
• Collaborate with IT and business units to embed security requirements into infrastructure and project designs.
• Oversee relationships with security vendors, handling procurement, licensing, and contracts.
• Control and report on technologies such as DLP, data classification, PAM, SIEM, SOC, and IDM.
• Lead risk assessment activities, define mitigation strategies, and follow up on implementation.
• Coordinate internal and external audits, track findings, and support remediation projects.
• Maintain up‑to‑date security policies, procedures, and guidelines, and ensure compliance with legal and regulatory obligations.
• Plan and deliver information security awareness programs and conduct periodic security controls.
• Participate in business continuity and disaster recovery testing.
• Support IT Service Desk alignment with ITIL processes, service catalog creation, SLA/OLA definition, and performance monitoring.

Required profile

• Bachelor’s degree in Computer Engineering, Software Engineering, Information Technologies or a related field.
• Minimum 3 years of experience in information security or related IT security roles.
• Strong understanding of security standards, legal requirements, and industry best practices.
• Proven ability to work cross‑functionally with IT and business stakeholders.

Required skills

• Penetration testing
• Vulnerability management
• Cyber threat intelligence
• Data Loss Prevention (DLP)
• Data classification
• Privileged Access Management (PAM)
• Security Information and Event Management (SIEM)
• Security Operations Center (SOC)
• Identity Management (IDM)
• Risk assessment and mitigation
• ITIL service management
• Audit coordination