Senior Information Security Compliance Consultant

Scope of duties

• Gap assessment projects (7/2024 MKr., ISO 27001:2022, etc.).
• Risk assessment projects.
• BCMS projects (BIA, BCP, DRP).
• Development of a documentation framework for clients.
• Carrying out the daily tasks assigned to them.

Requirements

• 5+ years of relevant work experience in the field of information security (compliance).
• Deep and rock solid knowledge of standards related to IT security (e.g., ISO/IEC 27001:2013 and 27001:2022), frameworks (e.g., NIST SP800-53 Rev4 and Rev5), recommendations (recommendations of the Hungarian National Bank on IT system protection), EU and domestic legislation (e.g., NIS2, GDPR, Hungarian Cybersecurity Act), and knowledge of current best practices.
• Deep IT and information security technological knowledge (mainly knowledge of network and cloud services).
• Higher degree in IT or information security.
• Internal and/or lead auditor, lead implementer certificate for ISO/IEC 27001:2022 or any relevant certification.
• CISA, CISM, CISSP, CRICS certificate, or a similar certification
• Excellent oral communication and cooperation skills, openness, and high level of written expression.
• Confident knowledge of the English language, both written and spoken (interpretation and processing of materials in English, participation in meetings with international customers).
• Proficiency in Office applications (Excel, Word, Outlook).
• Conversational English or German language skills.
• Creative handling of unexpected situations and challenges.
• Proactivity, ability to prioritize.
• Team spirit, enthusiasm, auditory attitude.
• Willingness to learn and develop.
• Category B driver’s license is an advantage.

The position is for you if

• You are interested in the field of information security and IT security, and you enjoy working on uncovering gaps, defining risks, and helping to develop possible responses to them in order to operate more efficiently.
• You would like to develop yourself and use your knowledge in practice at both small and medium-sized enterprises and multinational companies.
• You are interested in the field of cloud services and would like to expand your knowledge on this subject.
• You are happy to use your English or German language skills during work.
• You understand the essence and the objectives of information security, and you want to improve the resilience of critical infrastructures.
• You would like to work effectively in a young, purposeful team.

What We Offer

• You can work in a certified family-friendly, youthful work environment, where home office or hybrid working options are guaranteed for the long term.
• You can receive a competitive salary, supplemented by a performance-related bonus.
• We will ease your onboarding process by supporting you in several ways (with training, mentoring, and courses).
• We provide opportunities for continuous competence development, achieving professional (e.g., CISA, CISM, CISSP, CRISC, CIPP-E, CIPP-US) or other certifications (e.g., Microsoft Cloud Security), considering your development needs.
• You can participate in team-building activities regularly.