Support the development, implementation, and maintenance of information security policies, standards, and procedures aligned with internal needs and applicable frameworks (for example, ISO 27001, NIST, DORA, NIS2).
Assist with risk assessments to identify potential threats, vulnerabilities, and control gaps across systems and processes.
Monitor compliance with security policies, regulatory requirements, and internal standards.
Help prepare and maintain compliance documentation, such as risk registers, control descriptions, audit artifacts, and assessment reports.
Actively collaborate with everyone in the company to address any security or compliance gaps that are identified, and to address any needs arising from the company.
Introduce and support the implementation of security awareness and training programs for employees in collaboration with HR and department leads, to ensure it's part of new employee onboarding and existing employee refresh cycles (e.g., phishing awareness, policy training, best practices).
Be an ambassador of healthy, positive security culture
maintain and update security awareness materials and channels (for example, internal portals, newsletters, awareness campaigns, etc.).
Measure and report on user training completion and awareness program effectiveness.

Excellent communication skills (written and spoken) in Lithuanian and English are a hard requirement;
Strong problem-solving skills and a proactive approach to identifying and addressing security or organisational gaps;
Great attention to detail.
Working knowledge of GDPR and ability to work with legal documents/legislation
Experience in a GRC (Governance, Risk & Compliance), personnel training or similar related positions is a strong plus.
Familiarity with InfoSec industry standards and regulations, risk management is a plus.

Take your birthday off
Wrap up two hours earlier on Fridays
Enjoy one work-from-home day each week
20 extra remote days from anywhere in the world
Use your personal budget for courses or conferences
Grab any book you need
Join internal trainings, guest lectures, and more
Get covered with prepaid therapy sessions
Personal accident insurance
Private health insurance after 3 months
Sports and wellness events
From FIFA matches to learning events, retreats, and our legendary workations (Turkey, anyone?)

Risk and Compliance Specialist

Key skills