Information Security Specialist
One Albania
/job-details/9213
**Purpose of the position:**
To contribute to maintenance and improvement of the ISMS and BCM programs based on ISO 27001, ISO 22301 and Albanian Legislation/s. Follow and implement ISMS and BCM processes and procedures to be used in the local ISMS and BCM programs including the development of ISMS, BC, IT DR, Network DR and Contingency planning, identification of local contingency facilities and requirements. This position works in active cooperation with all team members.
**Main Tasks:**
- Propose solutions to IT security vulnerabilities, and coordinate with IT/business units for activities that need to be done to correct /prevent IS vulnerabilities until closure.
- Assess and mitigate any IT security related findings of any type of audit report: ISO 27001 Audit Report, Group Report, Internal Audit Report, Internal Control Audit, etc.
- Prepare reports regarding potential IT security vulnerabilities by assessing and analyzing periodically information security related system data (ex: from Log Event Management Tools, SIEM, Exchange & AD Auditing Tools, firewall, antivirus system, Defender, NESSUS etc.
- Coordinate with development and IT teams to ensure security vulnerabilities are addressed promptly.
- Collaborate continuously with other Company Teams Audit / IT teams/etc. in case an information security related event or security breach by performing the incident response process, analysis, identification, containment, recovery and lessons learned.
- Prepare and provide reports on security incidents, security performance/scanning results.
- Produce detailed reports for senior management on the state of the organization’s security posture.
- Oversee the configuration, implementation, and maintenance of security infrastructure, such as firewalls, DMZs, VPNs etc. Ensure encryption protocols, access control measures, and security updates are properly in place.
- Support other IT Group Managers for BCP (Business Continuity Procedures) to be defined, tested and validated.
- Create, implement and update information security policies, standards and procedures.
- Ensure compliance with security policies bu employees and third parties.
- Conduct regular security risk assessments to identify potential vulnerabilities, threats and risks to organization’s information systems.
- Participate in security audits and ensure readiness for internal or external assessments.
- Monitor and analyze data movement via DLP Solution within and outside the organization to ensure security compliance.
- Perform in time all the mandatory information security awareness trainings assigned by the information security team.
- Comply with Information Security Policies, and all company procedures and regulations.
**Education:**
University Degree in Electronics/Computer Sciences/Informatics.
**Experience and Qualifications:**
At least 2 years’ working experience in IT or GSM environment, preferably networking/systems implementation or maintenance profile.
Active participation on System/Computer Networks implémentations, configurations.
**Skills:**
- Good communication and presentation skills.
- English Language well spoken and written.
- Confidentiality, loyalty and flexibility, credentials such as ISO27001 Lead/Internal Auditor, CompTIA Security+, CC, CISSP, CISM, BCCP, BCCS are considered an advantage.
**Deadline for the application is**
**September 5**
**th**
**, 2026.**
**We will be glad to interview all candidates selected from the CV screening.**
**HR GROUP**
To contribute to maintenance and improvement of the ISMS and BCM programs based on ISO 27001, ISO 22301 and Albanian Legislation/s. Follow and implement ISMS and BCM processes and procedures to be used in the local ISMS and BCM programs including the development of ISMS, BC, IT DR, Network DR and Contingency planning, identification of local contingency facilities and requirements. This position works in active cooperation with all team members.
**Main Tasks:**
- Propose solutions to IT security vulnerabilities, and coordinate with IT/business units for activities that need to be done to correct /prevent IS vulnerabilities until closure.
- Assess and mitigate any IT security related findings of any type of audit report: ISO 27001 Audit Report, Group Report, Internal Audit Report, Internal Control Audit, etc.
- Prepare reports regarding potential IT security vulnerabilities by assessing and analyzing periodically information security related system data (ex: from Log Event Management Tools, SIEM, Exchange & AD Auditing Tools, firewall, antivirus system, Defender, NESSUS etc.
- Coordinate with development and IT teams to ensure security vulnerabilities are addressed promptly.
- Collaborate continuously with other Company Teams Audit / IT teams/etc. in case an information security related event or security breach by performing the incident response process, analysis, identification, containment, recovery and lessons learned.
- Prepare and provide reports on security incidents, security performance/scanning results.
- Produce detailed reports for senior management on the state of the organization’s security posture.
- Oversee the configuration, implementation, and maintenance of security infrastructure, such as firewalls, DMZs, VPNs etc. Ensure encryption protocols, access control measures, and security updates are properly in place.
- Support other IT Group Managers for BCP (Business Continuity Procedures) to be defined, tested and validated.
- Create, implement and update information security policies, standards and procedures.
- Ensure compliance with security policies bu employees and third parties.
- Conduct regular security risk assessments to identify potential vulnerabilities, threats and risks to organization’s information systems.
- Participate in security audits and ensure readiness for internal or external assessments.
- Monitor and analyze data movement via DLP Solution within and outside the organization to ensure security compliance.
- Perform in time all the mandatory information security awareness trainings assigned by the information security team.
- Comply with Information Security Policies, and all company procedures and regulations.
**Education:**
University Degree in Electronics/Computer Sciences/Informatics.
**Experience and Qualifications:**
At least 2 years’ working experience in IT or GSM environment, preferably networking/systems implementation or maintenance profile.
Active participation on System/Computer Networks implémentations, configurations.
**Skills:**
- Good communication and presentation skills.
- English Language well spoken and written.
- Confidentiality, loyalty and flexibility, credentials such as ISO27001 Lead/Internal Auditor, CompTIA Security+, CC, CISSP, CISM, BCCP, BCCS are considered an advantage.
**Deadline for the application is**
**September 5**
**th**
**, 2026.**
**We will be glad to interview all candidates selected from the CV screening.**
**HR GROUP**
