Information Security Process & Compliance Engineer

The Information Security Process & Compliance Engineer is responsible for implementing and maintaining the Information Security Management System (ISMS) in compliance with ISO 27001 standards, industry best practices, and client requirements. The role includes supporting risk management, incident management, audits, compliance monitoring, and security measurement processes.

What You'll Do

• Develop and maintain security policies and procedures;
• Conduct security training sessions for employees;
• Manage ISMS processes, including risk management, incident response, audits, and compliance reviews;
• Collaborate with IT teams, business units, network/system administrators, and DevOps to ensure security best practices;
• Ensure security controls and policies align with ISO 27001, NIST, and other industry frameworks;
• Assist in ISMS certification and implementation efforts;
• Monitor and improve security processes through metrics and continuous assessment;

Job Requirements

• 2+ years of experience in IT, including 1+ year specializing in information security;
• Hands-on experience in ISMS implementation and ISO 27001 certification;
• Strong background in risk management, incident management, audits, and compliance reviews;
• Experience in developing InfoSec policies and procedures;
• Knowledge of modern InfoSec frameworks such as ISO 27001, NIST, and other best practices;
• Basic understanding of system technologies (AD, DHCP, DNS, SMB, etc.) and network technologies (LAN/WAN, TCP/IP, and other network protocols);
• Familiarity with security technologies such as SIEM, NGFW, patching, vulnerability assessment, and antivirus/EDR;
• English proficiency from B1+ for written and verbal communication;

What Do We Offer

The global benefits package includes:

• Technical and non-technical training for professional and personal growth;
• Internal conferences and meetups to learn from industry experts;
• Support and mentorship from an experienced employee to help you professional grow and development;
• Internal startup incubator;
• Health insurance;
• English courses;
• Sports activities to promote a healthy lifestyle;
• Flexible work options, including remote and hybrid opportunities;
• Referral program for bringing in new talent;
• Work anniversary program and additional vacation days.