Information Security Expert (f/m/d) @ A1 Competence Delivery Center

Strength. Care. Growth

A1 Competence Delivery Center is a vital component of A1’s telecommunications business. Acting as an expertise hub, CDC is dedicated in delivering full range of high-quality IT, network, financial and other services to support A1’s operations across all OpCos, independent of location. 

Using the power of A1 Group and leverage synergies, CDC enables transparency of resources, key skills and knowledge expansion and personal career growth opportunities’ enhancement, paired with job stability. 

We are expanding the Security DC, part of the A1 Competence Delivery Center. Be part of this exciting journey! 

You will know we are the right place for you, if you are driven by:

• Opportunities to learn and build your career.
• Meaningful work in a stable and fast-paced company.
• Diversity of people, projects, and platforms.
• A supportive, fun, and inspiring place to work.

Role Overview:
The Information Security Officer ensures the secure and compliant operation of A1 Group’s hybrid environments, leading security initiatives and continuously enhancing processes and technologies to protect the organization and its customers.

Role insights:

• Advise the Security Delivery Center, other Delivery Centers, and business units across A1 Group on the implementation of internal security policies, ISO standards, and regulatory frameworks, including NIS2.
• Evaluate the effectiveness of security controls against internal policies, international standards, and applicable regulatory requirements.
• Review and interpret regulatory requirements and support the development of security policies, frameworks, and documentation.
• Collaborate with system owners and business stakeholders to develop remediation plans and address identified security gaps.
• Support audits, regulatory inspections, and bid management activities by providing relevant documentation, evidence, and expert insights.
• Contribute to advisory metrics and dashboards, reporting on compliance status, trends, and risk exposure.
• Conduct security risk assessments of various security solutions and provide recommendations on appropriate security measures.
• Manage, review, and continuously improve security policies, standards, and procedures.
• Promote continuous improvement, knowledge sharing, and cross-group collaboration.

What Makes You Unique:

• Bachelor's degree in Information Security, Computer Science, Information Technology, Business Informatics, Organizational Science, or a related field.
• At least 3 years of experience in compliance, IT or security auditing, risk management, security consulting, cybersecurity, or a related field.
• Strong understanding of ISO 27001/27002 and other relevant security standards.
• Familiarity with NIS2, DORA, GDPR, and other applicable regulatory frameworks.
• Experience managing audit and assurance findings and collaborating with stakeholders to address identified gaps.
• Solid understanding of security controls, governance models, and risk management principles.
• Excellent analytical, documentation, and communication skills.
• Good understanding of network security, web applications, and security vulnerabilities.
• Experience working with IT infrastructure, cloud environments, or security technologies.
• Fluent in English.

Our gratitude for the job done will be eternal, but we’ll also offer you:

•  Valuable experience in one of the fastest-growing and most innovative industries.
•  Challenging assignments with strong opportunities for personal and professional growth in a multinational environment.
•  Hybrid working model supporting a healthy work-life balance.
•  Thousands of online and in-person Learning opportunities for you to grow.
•  Modern, open, and friendly work environment that fosters continuous learning and the development of both technical and soft skills.
•  Special employee tariffs and a wide range of attractive employee benefits.

If you have any questions,  please do not hesitate to contact Svetlina Vazharova.