Security Compliance Specialist

Role Overview

• Conduct assessments of IT systems supply chain risks, focusing on cybersecurity aspects
• Develop and enforce security standards and protocols for suppliers
• Monitor and evaluate the cybersecurity practices of suppliers and partners
• Support the design and implementation of access control policies and procedures, ensuring that employees have access only to the resources necessary for their roles
• Participate in the user account management, including setting up, modifying, and revoking access as needed
• Support regular access reviews to ensure compliance with the least-privilege principles
• Coordinate and execute regular security and compliance audits
• Analyze audit and test results to identify vulnerabilities and non-compliance issues
• Recommend and follow up on corrective actions to address identified weaknesses
• Assist in identifying and evaluating risks to data and information systems
• Help with developing strategies and rules to mitigate identified risks
• Collaborate with various departments to ensure risk management measures are integrated across the company
• Conduct regular reviews of data processing activities
• Support implementation of data protection policies with focus on compliance with GDPR
• Assist in maintaining an inventory of all IT assets and ensure they are correctly classified and managed according to their security requirements
• Participate in the development and enforcement of policies related to the lifecycle management of these assets, including procurement, usage, and disposal
• Collaborate with HR to ensure that roles and responsibilities are clearly defined and integrated into access management
• Support embedding cybersecurity awareness into the organizational culture
• Help in the implementation of a data classification framework to categorize data based on sensitivity
• Support in implementing controls and handling procedures for different categories of data
• Collaborate with relevant departments to ensure consistent application of the classification scheme across the organization

Requirements

• 2+ years of experience in a security and/or compliance role, with a strong focus on IT segment
• Basic orientation in ISMS, ISO 27001, CRA and NIS2 regulatory requirements
• Ability to effectively communicate security concepts to both non-technical and technical stakeholders
• Adaptability, a high level of attention to detail
• Demonstrated reliability and strong issue-resolution skills
• Proficiency in English is essential.

Tech Stack

• Cyber Security

Benefits

• A unique opportunity to be part of a pioneering company in the crypto industry
• Option to receive part of your compensation in bitcoin
• Flexible working hours and a supportive team to help you implement your ideas
• Budget for professional development, including training programs, courses, and workshops of your choice
• Friendly, open culture with regular company events and fun get-togethers
• Renovated offices with a gym, massages, football table, billiards, PlayStation, 3D printer and free on-site parking
• Additional benefits such as a MultiSport card, company mobile phone tariff, and more