Senior Information Security Analyst (m / f / d)

Kraken; Santiago de Compostela; Presencial; EUR 35.000 - 55.000; Jornada completa

Descripción de la vacante

Kraken, a leading technology company, seeks a Senior Information Security Analyst to drive compliance and security automation efforts. The role offers the chance to support security process implementation, engage in diverse projects, and foster a positive security culture within the organization. Ideal candidates will have a passion for information security and relevant experience.

Formación

• Understanding of modern software technologies and low/no code tools.
• Experience implementing or maintaining ISO 27001-compliant ISMS.
• Experience leading compliance audits in certified organizations.

Responsabilidades

• Support the implementation and automation of security processes.
• Maintain and improve Information Security Management System (ISMS).
• Perform security risk assessments and third-party security assessments.

Conocimientos

Audit & Compliance Automation

Risk Management

Information Security

Stakeholder Communication

Descripción del empleo

Help us use technology to make a big green dent in the universe!

Kraken powers some of the most innovative global developments in energy.

We're a technology company focused on creating a smart, sustainable energy system. From optimising renewable generation, creating a more intelligent grid, and enabling utilities to provide excellent customer experiences, our operating system for energy is transforming the industry around the world in a way that benefits everyone.

It's a really exciting time in energy. Help us make a real impact on shaping a better, more sustainable future.

What we do : build the most AI-driven, innovative, forward-thinking platform for energy management. From optimizing resources to delivering cost-effective, exceptional customer experiences through advanced Customer Information Systems (CIS), billing, meter data management, CRM, and AI-driven communications, Kraken is powering the next wave of innovation in the energy industry.

Why we do it : future energy will not look like energy as we know it today. We need to not just think about our future, but build for it. Now.

In addition to transforming the energy space, we are actively working on transforming the way we manage information security and compliance to have state-of-the-art continuous, automated, and repeatable processes.

We are looking for a Senior Information Security Analyst with at least 4 years of relevant experience to be at the forefront of compliance and security automation. If you're passionate about Information Security and driving a positive security culture, we encourage you to apply!

What you'll do

• Support the implementation and automation of security processes and requirements
• Help expand our security assurance function
• Perform security risk assessments and risk management
• Maintain existing certifications (ISO 27001, SOC 1 and 2), and lead on attaining additional relevant certifications in the future
• Maintain and improve our Information Security Management System (ISMS) and related policies, standards, and procedures
• Perform third-party security assessments and manage third-party security risks
• Promote a positive security culture and raise awareness through training and initiatives
• Provide security advice and guidance to the technical team
• Liaise with stakeholders on security issues and provide future recommendations
• Automate Kraken's audit & compliance programs for scalable demonstration of compliance
• Collaborate with Privacy and Cyber Security teams to align security controls across Kraken

This is a varied role in a growing team. You'll have opportunities to engage in other security projects and initiatives, and we encourage you to take on challenges that match your skills and interests, working across teams to improve security organization-wide.

What you'll have

• Understanding of modern software technologies and automation (using low / no code tools for audit and compliance)
• Experience with Security & Technology Risk Management principles
• Experience with Third Party Security Due Diligence
• Experience implementing or maintaining an ISO 27001-compliant ISMS
• Ability to communicate security concepts clearly to non-experts
• Experience leading compliance audits and performing security risk assessments in certified organizations

What will help

• Passion for automating security and compliance
• Software engineering knowledge or experience
• Understanding of compliance frameworks
• Experience with security policies and controls
• Security certifications and qualifications
• Knowledge of SOC 1 and SOC 2 criteria, and experience in SOC-certified environments
• Familiarity with Cloud technologies, especially AWS or other CSPs

If this sounds like you, we'd love to hear from you. We are committed to providing tools and environments that enable your potential. If you require accommodations or have preferences, let us know to customize your interview process for comfort and success.

We encourage applications from all qualified candidates, regardless of whether you meet 100% of the listed requirements. We value diverse, honest, and empathetic people. Our commitment is to equal opportunity, inclusivity, and fairness for everyone.

J-18808-Ljbffr