Information Security Specialist

About the role

The Information Security Specialist will support the maintenance and continuous improvement of the organisation's Information Security Management System (ISMS) and Business Continuity Management (BCM) programmes, ensuring compliance with ISO 27001, ISO 22301 and Albanian legislation.

Key responsibilities

• Identify, propose and coordinate remediation of IT security vulnerabilities across the environment.
• Assess and mitigate findings from ISO 27001 audits, internal audits, and other security assessments.
• Prepare regular reports on security posture, incidents, and scanning results for senior management.
• Oversee configuration, implementation and maintenance of security infrastructure such as firewalls, DMZs and VPNs.
• Support Business Continuity Planning activities, including testing and validation of BCP procedures.
• Develop, update and enforce information security policies, standards and procedures.
• Conduct regular risk assessments and participate in internal or external security audits.
• Monitor data movement using DLP solutions and ensure compliance with security policies.
• Coordinate incident response activities, from detection through containment, recovery and lessons‑learned.

Required profile

• University degree in Electronics, Computer Science, Informatics or a related field.
• Minimum 2 years of experience in IT or GSM environments, preferably with networking or systems implementation/maintenance.
• Demonstrated ability to work collaboratively with development, IT and business teams.

Required skills

• Knowledge of ISO 27001 and ISO 22301 standards.
• Experience with SIEM, log event management and security monitoring tools.
• Familiarity with Exchange and Active Directory auditing.
• Hands‑on experience with firewalls, antivirus solutions, Microsoft Defender and Nessus.
• Understanding of VPN, DMZ and DLP technologies.