Information Security Specialist

This role joins the IT Strategy Division in the Security Promotion and Product Governance area, supporting information security and business continuity across a group providing e-commerce, payments, and financial services. The position focuses on strengthening governance as the group expands its use of generative AI and integrates new companies after M&A.

The work includes developing ransomware-focused BCP scenarios and incident response flows; designing and operating immutable backups for cloud and on-premises environments such as AWS, using WORM or object locking; planning large-scale recovery exercises; and creating recovery playbooks to reduce RTO. The role also supports AI usage guidelines and guardrails involving EDR, SASE, and MDM, DPO and PIA operations, ISMS internal audits, and IT-control integration during PMI.

Applicants must have at least three years of practical experience creating and operating BCP plans or handling incidents. They also need technical knowledge of ransomware countermeasures, immutable backups such as WORM, or disaster-recovery environments, plus experience planning and conducting recovery training or simulations and improving RTO/RPO. The posting additionally requires the ability to coordinate with business and engineering teams on process improvements and security guardrails.