Key Responsibilities
- Develop and maintain mechanisms to promote a strong information security culture across the organization.
- Design and deliver comprehensive information security awareness and training programs for all employees, including role-specific training where required.
- Continuously review and improve security policies and procedures in line with the evolving threat landscape.Build and maintain a centralized information security knowledge repository to support audits and knowledge sharing.
Security Risk Management
- Implement and maintain the information security risk assessment methodology, policies, and processes.
- Assess the organization s overall risk posture by conducting regular risk assessments across all information assets.
- Develop and maintain up-to-date information security risk profiles.
- Define, track, and review risk mitigation plans, ensuring timely follow-up and appropriate escalation of identified risks.
Security Compliance
- Monitor and ensure compliance with Delivery Hero (DH) and HungerStation (HS) information security policies, standards, guidelines, and procedures.
- Proactively manage ongoing compliance, certifications, and re-certifications against relevant security standards and regulations.
- Coordinate and support internal and external audits, ensuring timely and accurate fulfillment of audit requirements.
Overall Governance & Resilience
- Adhere to established policies, procedures, and processes to ensure work is carried out in a consistent and controlled manner.
- Identify and contribute to continuous improvement opportunities to enhance security processes and operational effectiveness.
- Promote a high-performance culture while upholding HungerStation s values and commitment to resilience and security excellence.
Knowledge & Experience
- 4 6 years of relevant experience in information security, risk, governance, or compliance roles.
- Strong hands-on knowledge of information security risk assessment and risk management frameworks.
- Deep technical understanding of information security controls and their practical implementation.
- Proven experience managing and conducting internal and external information security audits.
- Experience designing and delivering end-to-end information security awareness and training programs across organizations.
Education & Certifications
- Bachelor s degree in Computer Science, Computer Engineering, or a related field.
- At least two of the following certifications are mandatory: CISSP, CRISC, CISA, CISM, ISO/IEC 27001 Lead Implementer (LI) or Lead Auditor (LA), or equivalent.
