Enforce the Group’s information security strategy, policies, standards, and frameworks across the Marlink Cyber company.
Develop, maintain, and continuously improve the Information Security Management System (ISMS) in line with ISO/IEC 27001 and other applicable standards.
Ensure compliance with applicable legal, regulatory, and contractual information security requirements (e.g. GDPR, NIS2, client obligations).
Own and coordinate information security certification activities, including preparation for internal and external audits and ongoing certification maintenance.
Safeguard the cybersecurity posture of internal operations, products and services, and client-facing environments.
Conduct and oversee information security risk assessments and support risk treatment planning in collaboration with business and technical stakeholders.
Act as the primary point of contact for information security audits, assessments, and client assurance activities.
Promote and embed a strong cybersecurity culture across countries through awareness, guidance, and collaboration with internal teams.
Advise product, delivery, and commercial teams on information security requirements to enable secure and compliant business growth.
Coordinate with Group functions and external partners to ensure alignment, reporting, and continuous improvement of information security practices.
Qualifications
QUALIFICATIONS
University degree in Information Security, Computer Science, Engineering, or a related field, or equivalent professional experience.
5+ years of professional experience in information security, cybersecurity, or GRC roles, with demonstrated responsibility for governance, risk, compliance, and information security management.
Strong knowledge of relevant legal, regulatory, and industry requirements (e.g. GDPR, NIS2, ISO standards, client security requirements).
Hands-on experience with information security risk management, audits, and compliance activities.
Experience supporting or leading certification and audit processes (e.g. ISO/IEC 27001, SOC 2, or similar frameworks).
Ability to work effectively in a cross-country, organization and collaborate with technical, business, and Group stakeholders.
Strong communication and stakeholder management skills, with the ability to translate security and compliance requirements into practical guidance.
Professional certifications such as ISO/IEC 27001 Lead Implementer/Lead Auditor, CISSP, CISM, or similar are considered an advantage.
Additional Information
What we offer:
Growth in an open-minded culture with very little hierarchical macrostructure.
Opportunity to achieve your biggest potential and development in your area of responsibility.
Continuous development and advancement through industry-relevant certifications and internal/external training/workshops.
Challenging local and global projects involving current solutions.
Learning and sharing experiences with well-known and respected experts in the field of information/cybersecurity.
Positive, motivating, international work environment.
Hybrid work – office work + possibility of working from home by agreement.
Flexible working hours.
Additional and supplementary health insurance packages.