Information Security Officer (Compliance Assurance)

Active job offers

Other

Requirements

Professional experience with ISO27001
+3 years of experience in Information Security related roles
Familiarity with GDPR, NIS2, CRA
Familiarity with TISAX
Fluent English

Project Description

The Information Security Officer (Compliance Assurance) is responsible for maintaining and enhancing the organization’s information security compliance framework. This role would be a part of independent Quality and Compliance department, reporting directly to Head of Quality and Compliance. The assignment includes ensuring adherence to ISO/IEC 27001, TISAX standards, GDPR, NIS2, and other applicable regulations and standards. In addition to internal compliance, the role involves client-facing activities, providing consultancy on compliance and security matters, and conducting client-specific environment assessments to strengthen the security posture of client networks and systems. This person will work cross-functionally across departments and with clients to develop, implement, and monitor policies and procedures that uphold the organization’s security posture and compliance status.

Main responsibilities

Conduct internal ISO/IEC 27001 audits, preparing for external audits, and maintaining ISO/IEC 27001 certification.
Support the maintenance of Spyrosoft Integrated Management System to ensure compliance with implemented standards and regulations.
Identify, analyze, and document compliance gaps, proposing and overseeing remediation efforts.
Draft, review, and update security policies, standards, and procedures to reflect changes in regulatory requirements and best practices
Participate in processes reviews, improvement initiatives
Prepare and present detailed reports on compliance status, audit findings, and mitigation progress for both internal and client environments.
Provide consultancy to clients on compliance with security standards and regulation.
Conduct security assessments within the client’s environment to evaluate compliance and security controls, providing actionable recommendations for improvement.
Serve as a trusted advisor to clients, responding to queries, supporting their compliance journey

Position requirements

Technical Skills

3+ years of experience in information security, compliance, or risk management roles, preferably in a IT industry.
In-depth knowledge of ISO/IEC 27001 and InfoSec-related regulations (GDPR, NIS2, CRA)
Proven experience in conducting ISO/IEC 27001 audits (full scope) and maintaining an ISMS (controls assessment, nonconformity and corrective actions management, improvement actions facilitation)
Strong knowledge of GDPR requirements and best practices for data protection.
Familiarity with the NIS2 Directive
Familiarity and understanding of security tools like Firewall, WAF, EDR, SIEM, IDS/IPS, DLP, Vulnerability Scanners
Familiarity and experience with TISAX would be an advantage
Familiarity and experience in working with other ISO-based Management Systems would be an advantage
Fluent English

Soft Skills

Strong analytical skills, with a keen eye for detail and a proactive approach to problem-solving.
Excellent communication skills, with the ability to clearly explain complex compliance requirements to technical and non-technical stakeholders.
Can-do attitude and willingness to learn
Ability to work independently and manage multi-contextual assignments
Strong ethical standards and commitment to maintaining the confidentiality and integrity of sensitive information. Nice to have:
ISO/IEC 27001 Lead auditor certification
CISA certification

Benefits

More reasons to work with us

add_home_work

Work from home or the office

Depending on the position, you can work remotely, from the office or in a hybrid model.

sync_saved_locally

Top-of-the-line equipment

We provide the equipment that best suits your needs and the requirements of your role.

redeem

Training budget

Use your personal training budget to gain new skills and knowledge.

diversity_2

Internal initiatives

Take part in our knowledge-sharing meetups organised by and for tech enthusiasts.

stethoscope

Private health insurance

Keep your health in check with easy access to medical professionals.

Recruitment process

It only takes a few steps

Different roles have different requirements, so the recruitment process depends on the specific position you are applying for.

quick_reference_all

Checking your CV

We read every resume we receive carefully. If you meet our requirements, we will call you to learn more about your expertise and needs.

psychology

Evaluating your qualifications

After an initial phone call, we check your skills with a task related to your position and provide you with feedback afterwards.

sms

Making an appointment

The next step is a meeting at our office or online, where you can learn more about the team and our work culture from a Spyrosoft manager and/or partner.

task_alt

Getting the answer

At Spyrosoft, we contact every person participating in the recruitment process. Upon acceptance, we will provide a list of the next steps.

Meet the recruiter

Building a new team is a puzzle, there’s no room for mistakes.

Aleksandra Surminska

Senior Recruitment Specialist

Meet the recruiter

Submitted application is the very beginning of your adventure at Spyrosoft. We support you at its every stage.

Paulina Darnowska

Senior Recruitment Specialist

Information Security Officer (Compliance Assurance)

Salary

Location

Experience

Requirements

Project Description

Main responsibilities

Position requirements

Benefits

Work from home or the office

Top-of-the-line equipment

Training budget

Internal initiatives

Private health insurance

Recruitment process

Checking your CV

Evaluating your qualifications

Making an appointment

Getting the answer

Meet the recruiter

Meet the recruiter