Information Security Engineer

About the role

We are seeking an Information Security Engineer to join our IT Security team within IT Corporate. In this hands‑on position you will drive operational cybersecurity, support incident response, and help our organisation achieve ISO/IEC 27001:2022 certification.

Key responsibilities

• Monitor and investigate security alerts across multiple platforms.
• Participate in incident response activities and coordinate investigations.
• Organise vulnerability scanning, review findings, and prioritize remediation.
• Liaise with infrastructure, platform, application and support teams to track and enforce remediation actions.
• Arrange and follow‑up on external penetration tests and other security assessments.
• Assess applications, services and technical solutions from a security perspective.
• Maintain operational KPIs, dashboards and reporting on vulnerabilities, incidents and remediation progress.
• Produce auditable evidence for ISO/IEC 27001:2022 and NIS2 compliance.
• Identify automation opportunities to streamline security processes.

Required profile

• Hands‑on experience in security operations, monitoring and incident response.
• Proven ability to manage vulnerability and exposure programs.
• Familiarity with security assessments, risk evaluation and compliance frameworks such as ISO/IEC 27001 and NIS2.
• Strong collaboration skills to work with infrastructure, workplace and project teams.

Required skills

• Vulnerability management
• Security monitoring
• Incident response
• Security assessments
• ISO/IEC 27001 compliance
• NIS2 compliance

What we offer

• Opportunity to contribute to a major ISO/IEC 27001 certification programme.
• Collaborative environment with cross‑functional IT teams.
• Exposure to a broad range of security technologies and processes.