Information Security Specialist

The position aims to ensure an appropriate level of information security, and thereby contribute to increasing the organization's potential protection. Tasks: development, maintenance, and improvement of an Information Security Management System compliant with the requirements of ISO/IEC 27001, monitoring the organization's compliance with the requirements of the Cybersecurity Network Act, NIS2, and other information security regulations, participation in the maintenance and development of a Business Continuity Management System compliant with ISO 22301, development, updating, and implementation of information security policies, procedures, instructions, and standards, conducting compliance analyses and identifying areas requiring corrective or improvement actions, participation in the information security risk management process, including identification, assessment, and monitoring of risks, supporting process and system owners in implementing information security requirements, support in developing, updating, and testing business continuity plans and contingency plans, cooperation with the Data Protection Officer in ensuring compliance with GDPR, reviewing projects, contracts, processes, and solutions from the perspective of information security and personal data protection, participation in the assessment of suppliers and external entities in terms of meeting information security requirements, conducting educational activities and training in information security, GDPR, and business continuity, preparing announcements, informational materials, and campaigns to raise employee awareness, participation in handling information security incidents and personal data breaches. Requirements: higher education, preferred fields: information security, IT, law, audit, personal data protection, or related, minimum 2 years of experience in the area of information security, compliance, risk management, audit, personal data protection, or business continuity, practical knowledge of ISO/IEC 27001 requirements, knowledge of the principles of an Information Security Management System, knowledge of the Cybersecurity Network Act regulations, knowledge of ISO 22301 requirements or practical experience in business continuity, knowledge of GDPR regulations and basic principles of personal data protection, ability to develop organizational policies, procedures, instructions, and standards, experience in conducting risk analyses and preparing risk treatment plans, very good work organization, independence, and timeliness, ability for analytical thinking and formulating unambiguous recommendations, highly developed communication skills and ability to cooperate with representatives of various business areas, knowledge of English enabling work with documentation, standards, and regulations. proactive approach, independence, and very good work organization, analytical thinking and drawing conclusions, recommendations, teamwork skills.