Information Security Operations Specialist

Scope Ratings; Frankfurt; On-site; EUR 68,000 - 85,000; Full time

Benefits offered by this job

Discretionary bonus

Job summary

Scope Ratings GmbH in Frankfurt is seeking an experienced Information Security Operations Specialist to safeguard our technology stack. You will work hands-on with Microsoft 365 tools, Purview, Defender, Azure, and Entra ID to align security policy with day-to-day operations.

You will monitor threats, coordinate vulnerability remediation, manage access controls, and contribute to regulatory compliance including DORA.

Qualifications

• 5+ years of hands-on information security operations experience.
• Experience with Microsoft 365 security portals and cloud environments.

Responsibilities

• Run and optimize Microsoft 365 security tools (Defender XDR, Defender for Cloud, Defender for Endpoint, Defender for Identity).
• Own security monitoring (SIEM/SOC) and coordinate with external providers.
• Manage data loss prevention (DLP) policies in Purview.
• Oversee identity and access management (Entra ID) including SSO and CA.
• Lead vulnerability management and patch prioritization processes.
• Handle security incidents and ITSM tickets; implement fixes.
• Maintain security baselines and hardening across Azure.

Skills

InfoSec operations

SIEM monitoring

Threat monitoring

IAM / Entra ID

DORA/regulatory compliance

Security policy & operations

English proficiency

German language

Education

CS/IT/Cybersecurity degree

Tools

Microsoft 365

Purview

Defender suite

Azure

Entra ID

Sentinel

Job description

We’re looking for an experienced Information Security Operations Specialist in Frankfurt to keep our technology environment secure day to day. You’ll work hands‑on with Microsoft 365, Purview, Defender, Azure, identity and access management, and network security. The role connects security policy with daily operations. Working closely with IT, you’ll monitor threats, fix vulnerabilities, manage security settings and changes, and make sure we meet our internal policies and regulations such as DORA.

Duties & responsibilities

• Run and improve our Microsoft 365 security tools, including Defender XDR, Defender for Cloud, Defender for Endpoint, Defender for Identity, Sentinel and Entra ID.
• Own security monitoring (SIEM and SOC) and work with external security providers to make sure threats and vulnerabilities are dealt with.
• Set up and manage data loss prevention (DLP) policies in Purview to stop sensitive data from leaving the company.
• Manage user identities and access in Entra ID, including single sign‑on (SSO), Conditional Access and Privileged Identity Management (PIM), and watch for risky or suspicious sign‑ins.
• Run the vulnerability management process: find, assess and prioritize vulnerabilities, and make sure they get fixed.
• Handle security tickets and requests in the ITSM queue and respond to security incidents.
• Keep Azure and our wider infrastructure secure through security baselines, configuration reviews and hardening.
• Oversee security for enterprise applications and business services.
• Make sure we comply with DORA, and help the IT, Risk and Compliance teams put the Group Information Security Strategy into practice.
• Carry out first‑line security controls and reviews, fix findings and elevate risks.
• Support internal and external audits, regulatory inspections, penetration tests and control assessments.
• Review technology changes from a security point of view and give approvals and recommendations.
• Lead the response to major ICT incidents, including communication, escalation, stakeholder updates and post‑incident reviews, and report them to regulators as DORA requires.
• 5+ years of hands‑on experience in information security operations
• 3+ years of experience with Microsoft 365 and cloud environments (ideally Azure)
• Degree in computer science, IT, cyber security or a related field, or equivalent experience
• Experience securing Microsoft 365 (Intune, SharePoint, Teams, Exchange) through the Microsoft security portals
• Experience with Entra ID, including Identity Protection, Privileged Access Management and Conditional Access
• Hands‑on experience with DLP in Purview
• Good understanding of network security, such as firewalls, VPNs and intrusion detection/prevention
• Microsoft security certifications (SC-900, SC-200, SC-300 or SC-400) are a plus
• Familiarity with DORA, ISO 27001 or NIST
• Able to meet deadlines, stay calm under pressure and keep others on track
• Fluent English, written and spoken; German is a plus

Compensation Range:

The compensation range disclosed may encompass multiple title levels (Scope internal levels of seniority). Your actual compensation will depend on a variety of factors, including but not limited to your individual experience, education, and seniority, and the final salary will be determined during the interview and evaluation process.

Senior Specialist - Information Security Operations: 68.000 - 85.000 EUR

Bonus:

Discretionary

Benefits:

Scope offers an extensive range of benefits, please check our benefits page for more details.

Please note: For non‑EU applicants, a valid work and residence permit is a prerequisite for this job position. Unfortunately, we are unable to sponsor relocation from outside of the EU at this time.

What we want to see

• Copy of your university degrees and certificates
• Criminal record certificate (can be provided at a later date)
• At least 3 letters of reference (can be provided at a later date)

About Scope

When every rating agency sees risk the same way, investors share the same blind spots.

Scope Ratings offers a different view. As the leading European provider of independent credit ratings and fund research, we bring a European perspective to analysing risks through forward‑looking methodologies, giving institutional investors worldwide an alternative to the US‑based agencies.

We are the only European credit rating agency accepted by the ECB as an external credit assessment institution in the Eurosystem.

From Berlin, Frankfurt, London, Madrid, Milan, Oslo, Paris and Poznań, our analysts are building a strong European voice in global financial markets.

At Scope Group, we are committed to fostering a diverse and inclusive workplace where everyone is treated with respect and fairness. We embrace people from all backgrounds, regardless of culture, ethnicity and gender. We ensure that our application processes are free from discrimination. By valuing each individual’s unique background and perspectives, we strive to create an environment where all employees can thrive and contribute their best. Our dedication to equality and inclusivity reflects our belief that diversity drives innovation and success.