Information Security Analyst (Compliance SME)

euNetworks; Frankfurt; Vor Ort; EUR 60.000 - 80.000; Vollzeit

Zusammenfassung

A telecommunications company in Frankfurt is seeking an experienced Information Security Analyst to join their IT Security team. This role focuses on protecting the organization from information security threats, maintaining the Information Security Management System, and ensuring compliance with regulatory requirements. Ideal candidates will have substantial experience in Information Security and GRC, strong risk management knowledge, and proficiency in both English and German. The company offers a supportive work environment with growth opportunities and various employee benefits.

Qualifikationen

• Significant experience in Information Security and GRC.
• Understanding of risk management methodologies and international security standards.
• Familiarity with GDPR and data privacy legislation.

Aufgaben

• Maintain the ISMS in accordance with ISO 27001.
• Analyse and evaluate internal projects for risks.
• Conduct internal audits for compliance.
• Prepare security reports.
• Manage content for the security awareness platform.

Kenntnisse

Information Security expertise

Risk management methodologies

Analytical skills

Customer service orientation

Verbal proficiency in German

Verbal proficiency in English

Ausbildung

Relevant professional certifications (CISSP, CISM, ISO 27001)

Jobbeschreibung

The Role

As Information Security Analyst at euNetworks, you will play a key role in the ‘IT Security team’ protecting the organisation against information security threats. This includes maintaining existing security measures while continuously enhancing our governance, risk management and compliance (GRC) frameworks and policies. You will work closely with the ‘Information Security Steering Team’ and cross-functional departments to ensure euNetworks is compliant with regulatory requirements and protected from evolving threats.

What will you be doing?

• Maintain the Information Security Management System (ISMS) in accordance with ISO 27001
• Analyse and evaluate internal projects to identify risks and define appropriate compensatory measures
• Conduct internal audits to ensure compliance with applicable standards and to identify opportunities for improvement
• Prepare and present reports on information security
• Manage and update content for the information security awareness platform for employees and key suppliers, ensuring up-to-date training on information and cybersecurity best practices
• Research and recommend security enhancements and improvements

What do we want from you?

• Significant experience in Information Security and GRC
• Strong understanding of risk management methodologies and international security standards (e.g., ISO 27001, US NIST, etc.) and the ability to assess risks, identify vulnerabilities, etc.
• Familiarity with data privacy legislation such as GDPR
• Experience maintaining and auditing Information Security Management Systems (ISMS) in line with ISO 27001
• Customer service-oriented with the ability to build strong relationships with internal stakeholders
• Analytical and creative thinking skills, with the ability to identify pragmatic solutions
• The ability to organise the daily work schedule and delegate where necessary
• Strong verbal and written proficiency in English and German

Ideally, we’d also like:

• Relevant professional certifications such as CISSP, CISM or ISO 27001 Lead Implementer / Auditor
• Experience in Telecommunication or any other regulated industry

If this position is of interest but you don’t think you meet all of the criteria listed, please consider applying still. euNetworks looks to recruit people with the right attitude, potential and ambition and for the right candidate, we will provide further training and support to enable you to develop in the role.

What can we offer you?

We’re a multi-faceted company that has been consistently growing for over 10 years but we remain committed to our company values and hiring people who want to be part of the team and make a contribution.

We invest in our people by offering a range of benefits and development opportunities that are shaped to fit each of the countries we operate in.