IT Security & Risk Officer (ISO 27001)

Experis is a global leader in recruitment for IT specialists and management personnel in key IT areas. They offer competitive employment opportunities and interesting IT projects, catering both to experts with many years of experience and those starting their careers in the IT industry.

• Proven experience in cybersecurity governance, risk, and compliance (GRC)
• Strong knowledge of Information Security Management Systems (ISMS)
• Hands-on experience with ISO 27001 implementation, governance, and certification activities
• ISO 27001 Lead Implementer or Lead Auditor certification
• Good understanding of DORA, CRA, NIS2, and other relevant regulatory frameworks
• Experience conducting compliance assessments, gap analyses, and control reviews
• Strong stakeholder management and communication skills
• Ability to influence and collaborate with senior business and technology leaders
• Experience working in complex, international environments
• Fluent English skills

Nice to have:

• ISO 27005 certification
• Practical experience in information security risk management
• Experience supporting cybersecurity audit and certification programs
• Knowledge of additional cybersecurity and regulatory frameworks

• Drive the development, implementation, and continuous improvement of cybersecurity standards, procedures, and governance frameworks
• Support global ISMS implementation, maintenance, and certification activities
• Ensure alignment with ISO 27001, DORA, CRA, NIS2, and other relevant cybersecurity and risk management frameworks
• Translate regulatory and framework requirements into actionable standards, procedures, controls, and security requirements
• Perform requirement mapping, compliance assessments, and gap analyses
• Coordinate cybersecurity governance activities across cross-functional teams
• Advise stakeholders on cybersecurity compliance, risk management, and control effectiveness
• Support internal and external audits, certification processes, and audit readiness initiatives
• Collaborate with business and technology teams to strengthen cybersecurity posture and regulatory compliance
• Act as a trusted advisor to senior stakeholders on cybersecurity governance and risk-related matters