Information Security Manager

1 мес. назад

LithuaniaEuropeSeniorHybrid

Responsible for overseeing and strengthening the security function across multiple departments, managing risk, compliance, and operational security.

О компании

We build the tech that moves industries forward. We have our eyes set on AI, energy, logistics, sports and other complex and exciting segments.  We believe in an innovative approach to solving deep issues and encourage our people to find their own solutions. We are constantly rethinking processes, business models, architecture, and tech stacks.  We foster a sense of curiosity, experimentation, and passion beyond code. With us, you can easily deepen your knowledge in any field you’re curious about. And because we work across many industries, you’ll be gaining the experience others can only dream of. As Information Security Manager , you will take ownership of a broad and evolving security function, shaping a practical programme that addresses the risks that matter most. Working ac

Обязанности

Own and coordinate the company’s information security programme, priorities, and improvement roadmap
Maintain and develop security governance, policies, procedures, risk registers, and incident response documentation
Assess security risks, identify control gaps, and translate findings into practical, prioritised actions
Work with security tools and platforms such as XDR/EDR, SIEM, vulnerability management, MDM, and security awareness platforms
Coordinate security improvements with IT, legal, and external partners
Support ISO 27001, NIS2, audits, regulatory requirements, and third-party or supplier risk management activities
Evaluate security vendors and services, monitor their effectiveness, and coordinate specialised security activities when external expertise is required
Investigate security alerts and coordinate an effective response to security incidents
Communicate security risks, priorities, and decisions clearly to technical and non-technical stakeholders

Условия

A working culture that is high performing, ambitious, collaborative and fun
Health insurance
Flexible working hours
Bonus for referrals
Employee-led workshops and office perks
Extra vacation days: 2 after working at NFQ for two years and 4 after four years on our team
Unlimited WFH (work from home) policy
For those who dream of traveling: WFA (work from anywhere) possibilities in NFQ - approved countries

Другое

At least 4 years of experience in information security, cybersecurity, or a similar technical field
Practical experience managing information security activities in a business environment
Strong understanding of security governance, risk management, compliance, and common security controls
Experience with ISO 27001 or a similar security framework, together with familiarity with NIS2 requirements
Familiarity with threat frameworks such as MITRE ATT&CK and modern detection and response methodologies
Hands-on experience across several security areas, such as endpoint security, vulnerability management, or incident response
Ability to work with security platforms at an operational level, including reviewing alerts, assessing coverage, identifying gaps, and coordinating improvements
Experience creating or maintaining security policies, procedures, risk registers, and incident response documentation
Ability to investigate security alerts and coordinate incident response activities
Strong understanding of common cyber threats, attack methods, and security controls
Ability to assess risks, set priorities, and create structure in environments where processes are still developing
Experience working with security vendors, auditors, consultants, or managed service providers
Ability to communicate security risks clearly to both technical and non-technical stakeholders
Strong ownership, independence, and a structured approach to work
Fluency in both Lithuanian and English languages, written and spoken
Relevant certifications such as CISSP, CISM, Security+, CCSP, ISO 27001 Lead Implementer, or similar
Experience with endpoint security, vulnerability management, or security awareness tools
Experience with phishing simulations, secure software development, application security, or third-party risk management
Experience in a technology, SaaS, software development, fintech, or regulated environment