ICT Risk & Compliance Expert

The role is part of a project for a global leader in the fuel and retail industry, focused on Global Security Governance, Risk and Compliance. It involves expanding and maintaining a certified information security management system (ISMS) compliant with ISO 27001 on an international scale.

• Minimum 5-7 years of experience in information security, including implementing and maintaining certified ISMS.
• Experience managing governance documentation within an international organization and working with senior stakeholders.
• Proven ability to enforce document review deadlines across various organizational levels.
• Knowledge of current European regulatory requirements, including NIS2.
• ISO 27001 Lead Implementer certificate or equivalent experience.
• Practical knowledge of Confluence, Jira, Smartsheet, and Microsoft 365.
• English language proficiency at C1 level.

Nice to have:

• Knowledge of DRATA and ServiceNow tools.
• Experience collaborating with offshore teams.

• Build and maintain an inventory of security documentation compliant with NIS2 and other regulatory demands, identifying and closing gaps.
• Maintain the certified ISMS, including risk assessment, monitoring, non-compliance management, audit preparation, and KPI reporting.
• Coordinate annual reviews and updates of over 70 security documents with stakeholders at various organizational levels.
• Extend ISMS documentation from local to pan-European standards.
• Develop a communication plan for published policies in collaboration with the Change Management team.
• Identify needs and create standards and baselines at lower levels.