Security Assurance Expert (f/m/d) @ A1 Competence Delivery Center

Strength. Care. Growth

A1 Competence Delivery Center is a vital component of A1’s telecommunications business. Acting as an expertise hub, CDC is dedicated to delivering a full range of high-quality IT, network, financial and other services to support A1’s operations across all OpCos, independent of location.

Using the power of being OneGroup and leveraging synergies, CDC enables transparency of resources, key skills and knowledge expansion and personal career growth opportunities’ enhancement, paired with job stability.

You will know we are the right place for you, if you are driven by:

• Opportunities to learn and build your career.
• Meaningful work in a stable and fast-paced company.
• Diversity of people, projects, and platforms.
• A supportive, fun, and inspiring place to work.

Role Overview:

We are seeking a highly motivated and detail-oriented Security Assurance Expert  to join our Information Security Office in Security Assurance team. In this role, you will evaluate the implementation of internal cyber security controls, international standards (e.g., ISO 27001/2), and regulatory requirements such as NIS2, Local country regulations, build connections between needs and possibilities.

You will work as part of a centralized, international team responsible for conducting assurance activities across the A1 Group, assessing adherence to established security frameworks, and managing the lifecycle of identified risks and gaps. Your work will directly contribute to the continuous improvement of our security posture across all business units.

Role Insightst:

• Evaluate and assess effectiveness of security controls against internal governance framework, ISO standards, and regulatory frameworks (e.g., NIS2, DORA..).
• Conduct compliance assessments of systems and processes.
• Identify control gaps or non-conformities and provide actionable recommendations to mitigate risks.
• Collaborate with system owners and business stakeholders to develop remediation plans and track implementation progress.
• Support audits and regulatory inspections by providing documentation, evidence, and expert insight as required.
• Contribute to assurance metrics and dashboards, reporting on compliance status, trends, and risk exposure.
• Assist in developing and enhancing assurance methodologies and control frameworks in line with evolving standards and regulations.
• Actively contribute to a culture of continuous improvement, knowledge sharing, and cross-group collaboration.

What Makes You Unique:

• Bachelor’s degree in Information Security, Computer Science, Information Technology, Business Informatics, Organizational Science or related field.
• 2+ years of experience in assurance / compliance roles, IT or security audit, security consulting or similar.
• Strong understanding of ISO standards (at least 27001, 27002).
• Familiarity with NIS2, DORA, GDPR, and other applicable regulatory frameworks.
• Experience managing audit/assurance findings and working with stakeholders to close gaps.
• Solid understanding of security controls and governance models.
• Excellent analytical, documentation, and communication skills.
• Fluent in English.

Nice to Have:

• Professional certifications such as ISO 27001 Lead Auditor/Implementer, CISSP, CISA, CISM, or similar.
• Familiarity with security maturity models and control assessments.
• German and Balkan language skills.

Our gratitude for the job done will be eternal, but we’ll also offer you:

• Innovative technologies and platforms to “play” with.
• Modern working environment for your comfort.
• Friendly, ambitious, and motivated teammates to support each other.
• Thousands of online and in-person learning opportunities for you to grow.
• Challenging assignments and career development opportunities in multinational environment.
• Attractive compensation package.
• Flexible working schedule and opportunity for home office.
• Numerous additional benefits, including, but not limited to free A1 services.

If you have any questions,  please do not hesitate to contact Svetlina Vazharova.