Specijalist za informacijsku i kibernetičku sigurnost

About the role

VINDIJA d.o.o. is looking for a specialist to help establish and develop its information and cyber security management system. The role involves coordinating compliance activities, creating security policies, and supporting the broader IT and business teams.

Key responsibilities

• Establish and develop the information and cyber security management system.
• Coordinate activities related to ZKS/NIS2 compliance.
• Create and maintain security policies, procedures and guidelines.
• Participate in risk assessments and monitor security measures.
• Coordinate response to security incidents.
• Collaborate with SOC, IT teams, external partners and business process owners.
• Participate in security reviews of systems, projects, suppliers and changes.
• Develop security awareness among employees.
• Prepare reports for IT management and company boards.

Required profile

• Higher education in informatics, computer science or related technical fields.
• Minimum three years of experience in IT, information security, IT risk, infrastructure, audit or related areas.
• Understanding of ZKS/NIS2 requirements and practical application.
• Good knowledge of ISO/IEC 27001 and ISMS concepts.
• Familiarity with ITSM processes and ISO/IEC 20000 basics.
• Understanding of security risks, incidents, vulnerabilities and controls.
• Knowledge of network, system, application and cloud security.
• Ability to produce documentation, reports and action plans.
• Independent, structured, and able to work across multiple organizational units.
• Proficient English language skills.

Required skills

• ISO/IEC 27001
• ISO/IEC 20000
• ITSM processes
• ZKS/NIS2 compliance
• Security risk assessment
• Security incident coordination
• Network, system, application and cloud security
• SOC collaboration

What we offer

• Opportunity to build a new security function at group level.
• Work in a strategically important area for business and regulatory compliance.
• Possibility of education and certification.
• Collaboration with internal and external experts.
• Stable, technologically complex work environment.