Senior Information Security Consultant (GRC)

We are looking for Senior Information Security Consultant to become a member of our Governance, Risk and Compliance (GRC) team. Working at Marlink Cyber, you will have the opportunity to play a key role in protecting our clients' information systems and ensuring compliance with regulatory requirements. You will be responsible for identifying risks, assessing compliance levels, making recommendations and implementing security improvements across various industries and on projects at local and global levels.

What you’ll do:

• Develop and implement information and cyber security management frameworks, strategic plans, policies, and procedures
• Act as a trusted advisor to management on information and cyber security matters
• Manage information security projects
• Perform information and cyber security risk analyses
• Conduct compliance analyses, identify non-conformities, and recommend improvements to achieve compliance and enhance information/cyber security management systems in line with standards, regulatory frameworks, and best practices such as ISO/IEC 27001, NIS2, DORA, NIST, GDPR, and PCI DSS
• Deliver awareness trainings and educational sessions on information and cyber security topics
• Conduct awareness testing using social engineering methods

What you bring:

• University or professional education
• Relevant professional experience in information security
• Strong problem-identification and problem-solving skills
• Excellent communication skills
• Willingness to continuously develop and take a high level of responsibility
• Proficiency in Croatian and English , both written and spoken
• Certifications in information security such as CISA, CISM, CISSP, or similar are considered an advantage

What’s in it for you:

• Growth in an open-minded culture, with a high level of autonomy
• Opportunity to achieve your biggest potential and development in your area of responsibility
• Continuous development and advancement through industry-relevant certifications (ISACA, ISC2...) and internal/external training/workshops
• Challenging local and global projects that include latest technical solutions
• Learning and sharing experiences with well-known and respected experts in the field of information/cybersecurity
• Positive, motivating, international work environment
• Hybrid work model with flexible working hours
• Additional and supplementary health insurance
• Multisport membership
• Social events and team‑building activities