Information Security Officer

About the role

ENTERSOFTONE, a business software vendor in SE Europe with more than 1,500 employees, is looking for an Information Security Officer. Reporting to the CISO, you will be the operational backbone of the Information Security Program, turning the CISO's strategy into action while owning risk management, driving compliance and acting as the security voice in customer engagements and vendor relationships.

Key responsibilities

• Maintain and improve the ISMS in line with ISO 27001, NIS2, DORA and GDPR
• Conduct risk assessments across infrastructure, change requests, suppliers and AI systems
• Lead or coordinate incident response and test incident response plans and playbooks
• Support the Business Continuity Management program (BIA, continuity and ICT recovery plans) under ISO 22301 and DORA
• Respond to customer security due diligence questionnaires and support contract security reviews
• Support Security Awareness and Secure Development programs and govern the secure use of AI tools
• Support compliance monitoring, evidence collection for audits, and KPI/KGI reporting

Required profile

• 5+ years of experience in an information or cyber security role
• Proven ability to assess and manage third-party and supplier security risk
• Experience responding to customer DDQs and taking part in security contract reviews
• Strong communication, interpersonal and influencing skills; excellent written and spoken English
• Professional certification such as CISM, CISSP, ISO 27001 Lead Implementer/Auditor or equivalent
• Knowledge of ISO/IEC 22301 and practical experience with AI tools are a plus

Required skills

• Solid understanding of IT infrastructure, cloud technologies and security controls
• Hands-on experience with ISO 27001, GDPR, NIS2 and DORA compliance
• Incident management aligned with ISO/IEC 27035
• Familiarity with AI security risks, including OWASP LLM Top 10, ISO/IEC 42001 and the EU AI Act

What we offer

• Competitive remuneration package
• Private health insurance plan
• Hybrid working model
• Company bus transportation from central stations
• Funded training and development, catering food services