Information Security Specialist (Junior-Mid)

The team waiting for you: Our Information Security team helps keep the company, its people, and its products secure by making sure security and compliance are built into the way we work. In this role, you'll support the team across information security management, audits, risk assessments, and security awareness - working closely with experienced colleagues who will help you grow your expertise. As our security and compliance needs continue to evolve, you'll have the opportunity to learn how information security works in a real SaaS/tech environment and contribute to keeping our practices strong and audit-ready. In this role, you will: • Help maintain and improve our Information Security Management System (ISMS), following ISO/IEC 27001 and internal security policies with guidance from senior team members. • Support internal and external information security audits by coordinating timelines, gathering evidence, and tracking findings through to closure. • Contribute to risk assessments by documenting vulnerabilities, helping assess risks, and proposing practical mitigation measures. • Help organize regular security and compliance reviews across teams and follow up on agreed corrective actions. • Support security awareness initiatives, including preparing onboarding materials, maintaining training content, and helping run phishing simulations. • Work with different teams to keep security documentation, processes, and follow-up actions organized, accurate, and up to date. Your skills & experiences: • Some experience or exposure to information security, compliance, IT audit, risk management, or a related area. Recent graduates and career switchers with a genuine interest in information security are welcome. • Basic understanding of information security concepts and an interest in frameworks such as ISO/IEC 27001 — formal expertise isn't required, but willingness to learn is. • Strong organizational skills, attention to detail, and reliability when managing documentation, evidence, and follow-up actions. • Clear communication skills and a proactive, curious approach to learning and solving problems. • Fluent English, as you'll work with security documentation, tools, audits, and colleagues across the organization. Nice to have: • A degree in cybersecurity, IT, law, risk management, or a related field. • Exposure to security frameworks or regulations such as ISO 27001, SOC 2, GDPR, NIS2, or CRA through studies, internships, projects, or self-learning. • Basic familiarity with cloud concepts, particularly AWS or GCP, or tools such as Jira and Confluence. • Internship, project, or other experience in a SaaS, fintech, or technology environment. Salary & Benefits: • Gross salary: 2200 - 3950 EUR/month. Keep in mind that we are open to discuss a different salary based on your skills and competencies. • Growth & Learning: 40+ internal learning options, external conferences, mentorship, and year-round knowledge-sharing. • Health & Well-being: Private health insurance, psychotherapy, on-site well-being consultants, 24/7 gym access, and a wellness app. • Celebration & Community: Team events, an overseas workation, quarterly team-building budgets, and plenty of ways to mark milestones together. • Plus bonus vacation days, paid life-moment days off, barista coffee, and all the tools you need. See the full list of benefits here: https://career.oxylabs.io/blog/our-work-benefits/.