Information Security Analyst
Up Hellas
full-time
Posted on:
Location Type: Hybrid
Location: Athens • Greece
Visit company websiteExplore more
Tech Stack
About the role
- Maintain, review, and enhance existing cybersecurity policies, procedures, and controls in line with NIST, NIS2, and Group Security requirements.
- Serve as the primary point of contact with the Group Security function, coordinating timely implementation of annual policy updates and new security mandates.
- Lead the ongoing development and maintenance of our ISO 27001 Information Security Management System (ISMS), ensuring audit readiness.
- Conduct regular risk assessments, control validations, and internal compliance checks.
- Prepare periodic security governance reports for management and Group stakeholders.
- Monitor and manage daily alerts from our XDR platform, including triage, investigation, escalation, and resolution tracking.
- Support incident response processes and coordinate remediation activities across internal teams and Group Security when needed.
- Contribute to endpoint, identity, and network security hardening initiatives.
- Assist with vulnerability scanning cycles and track remediation progress with responsible teams.
- Contribute to the creation of operational playbooks and improvement of security workflows.
- Design and execute phishing simulation campaigns, analyze results, and provide actionable insights.
- Maintain and evolve the security awareness program, ensuring alignment with Group standards.
- Lead targeted security improvement projects such as MFA enhancements, access control reviews, and secure onboarding/offboarding processes.
- Act as a cybersecurity ambassador across the organization, promoting secure behavior and best practices.
Requirements
- Bachelor’s degree in information security, Computer Science, Cybersecurity, IT, or another relevant field.
- 3–5 years of experience in cybersecurity, combining elements of governance (GRC) and security operations (SecOps).
- Hands-on experience with XDR or SIEM platforms and incident management.
- Working knowledge of NIST, ISO 27001 controls, and NIS2 requirements.
- Experience with policy maintenance or compliance alignment, ideally within a Group or multi-entity environment.
- Strong written and verbal communication skills, with the ability to coordinate across technical and business stakeholders.
Benefits
- A dynamic work environment
- A suite of benefits: FlexOne, Fitpass, Private medical plan, Public Transportation Card, and even breakfast!
Applicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills & Tools
cybersecurity policiesrisk assessmentscontrol validationsincident responsevulnerability scanningphishing simulationsecurity workflowsaccess controlsecurity governanceISO 27001
Soft Skills
communication skillscoordinationleadershipanalytical skillsproblem-solvinginterpersonal skillsorganizational skillscollaborationadaptabilitysecurity advocacy
Certifications
Bachelor’s degree in information securityBachelor’s degree in Computer ScienceBachelor’s degree in CybersecurityBachelor’s degree in IT