Information Security Engineer

Role Overview

We are looking for a Security Engineer to join our team. As a Security Engineer, you will be responsible for implementing, maintaining, and continuously improving our ISO 27001 Information Security Management System (ISMS). You will also support SOC 2 Type II compliance efforts, conduct internal audits, and own and evolve our company-wide risk management program.

What You Will Do

Your day-to-day responsibilities will include driving the implementation and maintenance of our ISMS, supporting SOC 2 Type II compliance efforts, conducting internal audits, and owning and evolving our company-wide risk management program. You will also provide governance and security oversight for AWS environments, collaborate with Red Team and Blue Team, and maintain, update, and enforce security policies, standards, and procedures across the organization.

Why It Might Be a Fit

This role is a great fit for someone who is passionate about security and wants to take their career to the next level. You will have the opportunity to work with the world's leading brands, using Artificial Intelligence & Machine Learning technologies. You will also have the chance to contribute to data protection and privacy governance, drive AI / LLM governance practices, and act as a security consultant to business units and engineering teams.

Requirements

• Strong knowledge of ISO 27001, ISMS processes, internal audits, and control frameworks
• Hands-on experience with risk management practices, including risk identification, scoring, and mitigation tracking
• Experience in Business Continuity Management (BCM) and disaster recovery planning
• Solid understanding of AWS services and cloud security governance, including IAM, logging, and baseline hardening
• Familiarity with SOC 2 Type II framework and control domains
• Understanding of data security concepts, including data classification, data inventory, and data protection mechanisms
• Experience with vendor security and third-party risk management processes
• Knowledge of privacy regulations such as KVKK and GDPR, including practical implementation
• Familiarity with AI/LLM risks and governance concepts is a strong plus
• Strong documentation and reporting skills for audits, compliance, and executive visibility
• Experience in responding to customer security questionnaires and audits

Benefits

• Monthly meal allowance
• Comprehensive private health insurance
• Access to Spotify, LinkedIn Learning, Blinkist, MasterClass, Neoskola, and CloudGuru
• Internal trainings covering AI fundamentals, coding, foreign languages, and personal development skills
• ESOP (eligibility-based "Shareowner")
• Referral bonuses
• Opportunities to give back to your community through volunteering and purpose-driven social impact projects
• Global retreats and team-building activities
• Tech & Dev Talks