Junior Information Security Specialist

Allegro.eu S.A.; Poznań; On-site; PLN 90,000 - 130,000; Full time

Benefits offered by this job

Hybrid work model

Training budget

English classes

Volunteer day

Job summary

Allegro.eu S.A. is seeking a Junior Information Security Specialist to assist in threat monitoring, basic risk analyses, and implementing security measures across the Allegro Group.

The role emphasizes governance, risk, and compliance within a growing cybersecurity team. You will help ensure policy compliance, support training initiatives, and contribute to regulatory adherence including GDPR, NIS2, and other standards.

Qualifications

• Basic understanding of information security management principles, risk assessment methods, and regulatory compliance.
• Familiarity with major regulations (DORA, NIS2, AI Act, MAR, GDPR) and security frameworks (ISO/IEC 27001, NIST).
• Ability to review security and privacy contractual provisions (NDAs, data-sharing agreements) to identify risk.

Responsibilities

• Assist with monitoring threats and maintaining compliance with internal policies and external regulations.
• Support development and monitoring of security policies and data protection measures across Allegro Group.
• Conduct basic risk reviews for NDAs and data-sharing requests, advising Group Companies accordingly.
• Support security awareness training and incident response procedures.
• Assist in defining physical security requirements and monitoring their implementation.

Skills

GRC fundamentals

Regulatory awareness

Contract review

Communication skills

Analytical thinking

Attention to detail

English proficiency

Education

Degree in Law, Administration, Cybersecurity, Computer Science, IT Management or related field (in progress or completed)

Job description

The Junior Information Security Specialist supports the Information Security Team in protecting confidential data by monitoring threats, performing basic risk analysis tasks, and implementing security measures as well as monitoring policy compliance. They participate in maintaining compliance with internal policies and regulations, ensuring that basic security standards are met on a daily basis. This role is crucial for maintaining foundational security practices while providing the specialist with valuable experience to grow and develop further in the Cybersecurity field with an emphasis on the governance, risk, and compliance (GRC) domain.

Main responsibilities:

Security Policy: Assist with developing its provisions and monitoring the compliance level across Group Companies.

Data Policy: Monitor compliance with its provisions and help define rules for sharing data outside the Allegro Group.

Non-Disclosure Agreements (NDAs) & third parties: Conduct basic security risk reviews for NDAs and third-party data-sharing requests, advising Group Companies accordingly.

Security awareness: Support the delivery of mandatory and non-mandatory training courses and initiatives to ensure appropriate levels of data security awareness among employees and contractors of Group Companies.

Regulatory compliance: Assist with verifying the security measures used by Group Companies to ensure compliance with applicable security policies and regulations (DORA, NIS2, MAR, AI Act, GDPR, etc.) as well as information security principles, frameworks, and policies.

Risk management: Provide basic support to employees of Group Companies in the identification and evaluation of various information security risks.

Physical security: Assist in defining physical security requirements for offices and supervision of their implementation.

Incident management: Support the development of incident response procedures and participate in administrative and operational handling of incidents.

Corrective actions: Recommend basic corrective and improvement actions for Group Companies and monitor the process of their implementation.

Requirements

Experience: 0.5–2 years of experience (including internships or work placements) in information security, data protection, compliance, IT audit, or technical/legal consulting.

Education: Degree (completed or in progress) in Law, Administration, Cybersecurity, Computer Science, IT Management, or a related field is preferred.

GRC foundations: Basic understanding of information security management principles, risk assessment methodologies, and regulatory compliance.

Regulatory awareness: Familiarity with major regulations (e.g. DORA, NIS2, AI Act, MAR, GDPR) and standard security frameworks (e.g. ISO/IEC 27001, NIST).

Agreement review: Ability to review security and privacy contractual provisions (such as NDAs and data-sharing agreements) to identify organisational risk and to ensure appropriate security for various collaboration scenarios, both internal (within the Allegro Group) as well as external ones.

Languages: Very good spoken and written English enabling seamless work with technical/legal documentation, regulations, and within an international team.

Soft skills: Strong communication skills and diplomacy (ability to translate technical/legal requirements into clear business language), paired with analytical thinking and strong attention to detail.

What we offer:

• Flexible working hours in a hybrid model (4/1) - our hours can start between 7:00 a.m. and 09:00 a.m. We also have 30 days of occasional remote work.
• Long term discretionary incentive plan based on Allegro.eu shares (restricted stock units).
• Annual bonus based on your annual performance and company results.
• Well-located offices (with e.g. fully equipped kitchens, bicycle parking, terraces full of greenery) and excellent work tools (e.g., raised desks, ergonomic chairs, interactive conference rooms).
• A wide selection of fringe benefits in a cafeteria plan - you choose what you like (e.g. medical, sports or lunch packages, insurance, purchase vouchers).
• English classes that we pay for related to the specific nature of your job.
• A training budget, inter-team tourism and an internal learning platform where you will find multiple trainings.
• An additional day off for volunteering, which you can use alone, with a team, or with a larger group of people connected by a common goal.
• Social events for Allegro people - Spin Kilometers, Family Day, Fat Thursday, and many other occasions we enjoy.
  And that's just the beginning! You can read more about the benefits here .
  #goodtobehere means that:
• You will shape the future of e-commerce - creating innovative, pioneering solutions that set new market standards. We have over 21 million active buyers across 6 countries and collaborate with more than 164k Partners.
• You will join a team you can always count on - we have on board top-class specialists who have sharing knowledge, experience, and best practices in their DNA. Want to get to know them better? Listen to the Allegro Podcast .
• You will be part of a team that always aims to stay one step ahead of the market - we act quickly, dynamically, and at the highest level, because only then we can genuinely shape the future of e-commerce.
• You will build your own development path - with access to diverse business areas, large-scale international projects, internal mobility, inter-team tourism, and regular feedback from your manager, you will drive your growth.
• You will see that mistakes are opportunities to learn - we believe that no matter how well we execute, we can always get better.

Don't wait until you join us! Let's meet online!

Get to know our team, take a peek at our office life and check out what else we do at Allegro.