Position Summary
The Information Security Specialist is responsible for the technical implementation, operation, and continuous improvement of the organization’s information security controls. The role ensures the confidentiality, integrity, and availability of systems supporting business operations, licensing, competition management, member services, and other critical platforms. The incumbent will take a hands-on role in cybersecurity engineering, monitoring, incident response, and secure system design, while supporting compliance with GDPR, European information security regulations, and internal security standards.
Key Responsibilities
- Design, implement, and maintain secure IT architectures across on-premises, cloud, and hybrid environments.
- Implement and enhance security controls for critical business and operational systems.
- Ensure secure configuration and hardening of operating systems, networks, endpoints, and applications.
- Operate and maintain security technologies including SIEM, EDR/XDR, firewalls, IDS/IPS, and vulnerability scanning tools.
- Monitor security events, investigate alerts, and respond to cybersecurity incidents in line with incident response procedures.
- Conduct root cause analysis and implement corrective and preventive actions following security incidents.
- Participate in threat intelligence, continuous monitoring, and proactive detection activities.
- Manage, guide, and fine-tune SOC operations to improve detection, response, and overall security effectiveness.
- Implement and manage Identity and Access Management controls, including MFA, role-based access control, and privileged access management.
- Enforce data protection controls for Personally Identifiable Information in compliance with GDPR.
- Support encryption controls including data at rest, data in transit, and key management.
- Implement and support data loss prevention measures where applicable.
- Conduct regular vulnerability scans and coordinate penetration testing exercises.
- Prioritize, remediate, and track vulnerabilities, weaknesses, and security gaps.
- Ensure timely patching of operating systems, applications, firmware, and security appliances.
- Support secure software development practices and DevSecOps initiatives where applicable.
- Review system changes, configurations, and deployments to assess security impact.
- Ensure logging, monitoring, and audit trail requirements are enabled for critical systems and services.
- Support compliance with ISO 27001, NIS2, GDPR, PCI-DSS, and internal information security policies.
- Assist in technical audits, security assessments, and risk mitigation programs.
- Maintain technical security documentation, procedures, architecture diagrams, and operational records.
- Participate in incident response, forensic analysis, containment, recovery, and post-incident review activities.
- Support disaster recovery and business continuity planning from an information security perspective.
- Participate in cybersecurity simulations, tabletop exercises, and readiness drills.
Educational Qualifications
Bachelor’s degree in Computer Science, Cybersecurity, Information Systems, or a related field.
Experience Requirements
- Minimum 5 years of experience in hands-on information security, cybersecurity engineering, or related technical security roles.
- Proven experience in securing systems within regulated or high-sensitivity data environments.
- Experience working with cloud platforms such as Microsoft Azure, AWS, or equivalent, including hybrid infrastructure environments.
- Experience in security monitoring, vulnerability management, incident response, and technical security operations.
- Experience working with SOC environments and improving SOC operational effectiveness is preferred.
Technical Skills
- Strong knowledge of network security technologies including firewalls, VPNs, segmentation, and secure DNS.
- Experience in endpoint security including EDR/XDR, hardening, and patch management.
- Preferred experience with ManageEngine and SentinelOne.
- Hands-on experience with SIEM operations and log analysis.
- Experience in vulnerability scanning, remediation tracking, and patch management.
- Knowledge of encryption technologies and key management practices.
- Strong understanding of IAM, MFA, and privileged access management.
- Experience in secure configuration and administration of Windows and Linux environments.
- Understanding of GDPR technical controls and practical data protection measures.
- Knowledge of IDS/IPS, DLP, and audit logging controls.
- Exposure to cloud security controls and secure hybrid architecture design.
Behavioral Competencies
- Strong analytical and troubleshooting skills.
- Ability to work effectively under pressure during security incidents and operational disruptions.
- Clear and accurate documentation skills.
- Strong verbal and written communication skills.
- High level of integrity, discretion, and confidentiality.
- Ability to collaborate effectively with IT, legal, operations, compliance teams, and external partners.
Preferred Certifications
- CISSP, CISM, or CISA.
- CEH, FCSS, Security+, or equivalent technical security certification.
- ISO 27001 Implementer or ISO 27001 Auditor certification.
- Cloud security certifications such as Azure Security Engineer, AZ-500, SC-400, SC-300, or equivalent.