Junior Information Security Specialist

Monri Payments, founded in 2017, started as a small startup with a bold vision: to simplify and enhance digital payments. As early as 2019, with a team of just 10 employees, Monri developed an omnichannel payment orchestration platform, laying the foundation for rapid growth. Shortly after, Monri further expanded its portfolio by introducing cash register software solutions, becoming a true one-stop shop for business operations in the HoReCa industry.

Today, Monri employs more than 200 people and operates in 10 markets: Croatia, Serbia, Bosnia and Herzegovina, Montenegro, Slovenia, North Macedonia, Albania, Kosovo, Romania, and Moldova – supporting over 15,000 merchants, with a continuous focus on international expansion.

For its innovations in payments, Monri received a special recognition from Mastercard in 2023 for multi-sensory transaction confirmation, and in 2024 was awarded the “Deloitte Impact Star” recognition for its contribution to business development, society, and sustainability.

We’re looking for a Junior Information Security Specialist to join our security team and grow into governance, risk and compliance work. You will support audit readiness, PCI DSS and ISO/IEC 27001 activities, ISMS documentation, BCP/DR testing and third-party security questionnaires, working closely with experienced colleagues who will mentor you along the way.

Key Responsibilities

• Assist in reviewing evidence in our compliance platform for alignment with PCI DSS and ISO/IEC 27001
• Support the team during external audits and assessments (preparing documentation, collecting evidence, coordinating with internal teams)
• Help maintain security policies, SOPs and control mappings under the guidance of senior team members
• Participate in BCP/DR plan testing and help document results and follow-up actions
• Help track risk registers and remediation deadlines, and follow up with teams on open items
• Complete third-party security questionnaires (e.g. from customers and partners), gathering accurate answers from the relevant internal teams and keeping a library of approved answers up to date

Requirements

• No prior professional experience required. We welcome recent graduates and final-year students.
• Degree (or final year of study) in Information Security, IT, or a related field
• Interest in PCI DSS and ISO/IEC 27001, and willingness to learn them in depth
• Strong English communication skills, written and spoken
• Structured, detail-oriented way of working, with the ability to keep track of deadlines across teams

Nice to have

• Any experience in information security, IT audit, compliance or IT operations (including internships, student work or personal projects)
• Experience with security questionnaires or vendor due diligence
• Basic familiarity with PCI DSS and/or ISO/IEC 27001 from studies or self-study
• Awareness of NIS2, DORA or other regulatory frameworks
• Exposure to GRC tools, audit trackers or ticketing systems (e.g. Jira)
• Entry-level certifications (e.g. ISO/IEC 27001 Foundation, CompTIA Security+) or willingness to pursue CISA/CRISC/CISM later

What we offer

• Opportunity to work in a fast-growing fintech environment
• Dynamic team culture focused on innovation, learning, and impact
• Mentoring from experienced security and compliance professionals
• Hands-on exposure to real PCI DSS and ISO/IEC 27001 audits
• Clear growth path towards the Information Security Specialist role
• Flexible working hours
• Hybrid form of work
• Modern office space (free office refreshments & dog friendly office)

Don’t meet every point? Apply anyway. We hire for potential and curiosity.
​
#Monri