Вакансия из Hirify Global, списка международных tech-компаний Для мэтча и отклика нужен Plus
Пожаловаться
Зарплата и рынок
ЗП не указанаразвернуть
На похожих ролях по рынку
$65к$68кмедиана$69к
7 в выборке
На СНГ рынке: $4к/мес ($3.7к - $5.5к)
84
Хорошая вакансия
развернуть
У роли понятный senior-фокус и заметная ответственность за аудиты и актуальные требования в крупной европейской облачной компании; требование свободного немецкого может ограничить круг подходящих специалистов.
?Нужен немецкий
Понятная зона ответственности
Безопасность облака
Поддержка обучения
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Подключить Plus
Описание вакансии
Текст:
Hirify AI/Оригинал
TL;DR
Senior Information Security Professional (ISO 27001): Designing and operating an integrated security management system across international cloud infrastructures with an accent on ISO 27001, NIS2, KRITIS, and continuous compliance. Focus on leading certification audits, automating evidence collection with GRC tooling, aligning regulatory frameworks, and presenting security metrics to senior management.
Location: Bucharest, Romania; hybrid work option
Company
hirify.global is a European provider of cloud infrastructure, cloud services, hosting, and digitalization solutions for small and medium-sized businesses and enterprises.
What you will do
Functionally lead project teams, engineers, and junior security colleagues across certification and audit initiatives.
Architect and maintain an integrated management system covering ISO 27001, KRITIS, and NIS2 across international cloud infrastructures.
Plan, execute, and follow up on internal and external security audits while advancing continuous compliance through dashboards and GRC tooling.
Align certification frameworks with evolving regulatory requirements, including NIS2 and KRITIS.
Prepare and present security metrics and certification status reports to senior management.
Support risk management, third-party risk assessments, security awareness, and incident management across product lines.
Requirements
Degree in Computer Science, Information Security, or equivalent practical experience in cloud or SaaS hosting environments.
Proven track record of successfully leading ISO 27001 audits.
Hands-on familiarity with GDPR, CSA CCM, and emerging NIS2 and KRITIS standards.
Ability to lead cross-functional projects, mentor colleagues, and manage diverse stakeholders without direct authority.
Experience with modern GRC tools and automated evidence collection.
Fluent German and English, with strong analytical and executive reporting capabilities.
Culture & Benefits
Flexible work schedule and hybrid work option.
Local and international training, development opportunities, and access to e-learning platforms.
Modern technologies and product responsibility.
Medical services package, 25 vacation days per year, substitute days off for public holidays falling on weekends, and meal tickets.
Team and networking events, including summer and winter parties, in a diverse and collaborative environment.
Будьте осторожны
Если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого. Это мошенники. Обязательно жмите «Пожаловаться» или пишите в поддержку. Подробнее в гайде →