Information Security Specialist – SOC & GRC Focus

About the role

We are seeking an experienced Information Security Specialist to strengthen our cybersecurity posture. The role blends technical SOC operations with governance, risk, and compliance activities, ensuring robust protection of our information assets.

Key responsibilities

• Support implementation and continuous improvement of information security controls.
• Participate in Security Operations Center (SOC) activities: monitoring, alert analysis, incident detection, investigation, escalation, and response.
• Analyze security events from SIEM, firewalls, and other security technologies.
• Conduct vulnerability assessments, manage remediation, and follow‑up on findings.
• Maintain and enhance the organization’s Information Security Management System (ISMS).
• Assist with risk assessments, risk treatment, and development of security policies, procedures, standards, and guidelines.
• Support internal and external audits, compliance assessments, and remediation of audit findings.
• Collaborate with IT and business teams to embed security requirements into projects.

Required profile

• Bachelor’s degree in Cybersecurity, Information Security, Computer Science, IT, or a related field.
• 3–4 years of hands‑on experience in information security or cybersecurity.
• Strong knowledge of SOC processes, security monitoring, incident response, and threat analysis.
• Familiarity with ISO/IEC 27001, NIST Cybersecurity Framework, and other recognized security standards.
• Excellent analytical, problem‑solving, documentation, and communication skills.

Required skills

• SIEM and log monitoring
• Endpoint security
• Network security and firewalls
• Identity & Access Management (IAM)
• Vulnerability management
• Incident response
• System and application security
• Cyber threat analysis, attack techniques, Indicators of Compromise (IoCs)
• ISO/IEC 27001 controls
• NIST Cybersecurity Framework
• Governance, Risk & Compliance (GRC)