Information Security Specialist
Description
We’re looking for an Information Security Specialist to help shape the future of business messaging at LINK Mobility - Europe’s leading mobile messaging and CPaaS provider.
At LINK, we power communication that keeps everyday life moving. From flight check-ins and delivery alerts to SMS authentication, WhatsApp support messages, and mobile coupons - chances are you’ve already interacted with our technology without even knowing it. We help businesses engage and delight customers through scalable, end-to-end communication solutions. This is an exciting moment to join LINK. The mobile communications industry is evolving fast, and we’re expanding our award-winning CPaaS offerings to match the pace of innovation.
Key rsponsibilities:
- Maintaining and improving the Information Security Management System (ISMS) in line with ISO/IEC 27001
- Performing and supporting information security risk assessments and tracking remediation activities
- Supporting internal and external security audits, certification activities and compliance assessments
- Supporting vulnerability management, including follow-up of findings, remediation status and risk acceptance
- Monitoring implementation and effectiveness of security controls across systems, products and business units
- Supporting third-party and supplier security assessments, including security questionnaires and contractual security requirements
- Reviewing and responding to customer security questionnaires, RFPs and due diligence requests
- Supporting security reviews of new systems, services, suppliers and technical solutions
- Maintaining security policies, standards, procedures, control documentation and evidence
- Supporting security incident management, investigations and lessons-learned activities
- Supporting security awareness initiatives and communication with employees
- Collecting and analyzing security metrics and contributing to management reporting
- Working with technical teams on topics such as identity and access management, endpoint security, vulnerability remediation, logging and monitoring, cloud security and data protection
- Supporting continuous improvement of the organization's overall security maturity
Your Profile:
- Advanced knowledge of Polish and English is an absolute must-have
- 2+ years of professional experience in information security, cybersecurity, IT risk, IT audit or a related field
- Practical understanding of information security risk management and security controls
- Familiarity with ISO/IEC 27001 and ISO/IEC 27002
- Understanding of common security areas such as:
- Identity and access management
- MFA and privileged access
- Endpoint security and EDR
- Vulnerability and patch management
- Network security
- Logging and monitoring
- Backup and recovery
- Cloud security
- Ability to review technical and organizational information and identify security risks and control gaps
- Strong analytical and documentation skills
- Excellent communication and interpersonal skills
- Positive attitude, and ability to create enthusiasm and dedication among colleagues and customers
- Integrity and courage to speak up when required, while keeping calm in demanding situations
- Ability to communicate security topics clearly to both technical and non-technical stakeholders
- Ability to work independently while collaborating across international teams
Nice to have:
- ISO 27001 implementation or certification audits
- NIS2, DORA, GDPR or similar regulatory frameworks
- Security frameworks such as NIST Cybersecurity Framework, CIS Controls or SOC 2
- Microsoft security technologies, including Microsoft 365, Entra ID, Intune, Defender and Purview
- Cloud platforms such as Azure, AWS or Google Cloud
- Vulnerability management platforms and security monitoring/SIEM solutions
- Third-party security risk management
- Incident response or security investigations
- Data classification, DLP and information protection
We offer:
- Hybrid work model
- Co-financed Medicover care
- Co-financed private life-insurance
- Co-financed MultiSport card
- Extra day off on your birthday
- Team building events
- Extra fee from employer for retirement program (PPK)
- Employee Referral Program
- Summer bonus
- Fruits in the office
- Lunch days: Mondays & Wednesdays
- Free parking (cars & bikes)
Every employee is an important member of the LINK Family. We do not accept any discrimination, whether active or by means of passive support, whether based on ethnicity, national origin, religion, disability, gender, sexual orientation, marital or parental status, union membership, political views, age or any other characteristic that results in compromising the principle of equality. LINK Mobility regards diversity as a lever for profitability.