Senior Information Security Engineer

SmartRecruiters is a Recruiting AI company that provides an AI-powered hiring platform used by over 4,000 companies globally, including Amazon, Visa, and McDonald's. It is part of SAP and focused on delivering scalable, AI-driven recruitment solutions.

• 5+ years of experience in information security, governance, risk, and/or compliance with a technical focus.
• Experience with at least one major compliance or auditing framework.
• Strong understanding of controls auditing and evidence management.
• Knowledge of risk management methodologies and experience conducting risk assessments.
• Ability to manage multiple projects independently.
• Capability to investigate technical and governance-level IT security and compliance issues.
• Strong understanding of technology, cloud-based products, and SaaS environments.
• Experience collaborating across business units and geographic regions.
• Experience with ISO 27001.
• Excellent written and verbal communication skills in English.

Nice to have:

• Professional certifications such as CISA, CRISC, CISM, CISSP, CCSK, CCSP.
• Experience with ISO 9001, 27017, 27018.
• Experience with ISO 22301, including BIA, BCP/DRP, and recovery testing.
• Experience with cloud compliance frameworks like BSI C5.
• Knowledge of AI security principles and familiarity with the EU AI Act.
• Technical knowledge of cloud infrastructure (AWS preferred), networking, identity management, and SaaS security architectures.
• Experience with enterprise risk management tools.
• Understanding of threat modelling and secure development lifecycle (SDLC).
• Hands-on experience with incident response including investigations and containment.

Governance, Risk & Compliance:

• Identify and automate repetitive GRC processes including evidence collection, control monitoring, and compliance reporting.
• Build and maintain automated workflows using compliance platforms and scripting.
• Develop reusable templates and playbooks for recurring GRC activities.
• Collaborate with engineering and IT teams to integrate security and compliance checks into toolchains and CI/CD pipelines.
• Evaluate and improve GRC tooling and reporting to enhance operational efficiency.
• Manage stakeholder relationships and ensure IT risk and compliance obligations are met.
• Maintain local and regional stakeholder communications including meetings and reports.
• Support SOC 2 Type II framework maintenance including audit support.
• Manage ISO 27001 and ISO 22301 audit lifecycles and improvements.
• Support ISO 42001 framework maintenance aligning with the EU AI Act.
• Support vendor risk management and third-party security assessments.

Business Continuity & ISO 22301:

• Act as subject matter expert or contributor for BCMS strategy and audits.
• Support Business Impact Analysis, BCP/DRP development, recovery exercises, and continuity metrics.

AI Security & Compliance:

• Support assessment of AI-related risks and alignment with ISO 42001 and EU AI Act.
• Collaborate with product and engineering teams on security controls for AI/ML features.

SmartRecruiters is an Equal Employment Opportunity employer that does not discriminate on legally protected characteristics including race, religion, gender, sexual orientation, disability, or veteran status.