Junior Information Security Specialist

About the role

As a Junior Information Security Specialist you will join the Security Governance team of the GLS Group. You will support daily information‑security tasks, help operate the group‑wide ISMS and contribute to compliance with ISO 27001 and NIS2 requirements.

Key responsibilities

• Support operation and maintenance of the group‑wide ISMS based on ISO 27001 and regulatory requirements.
• Assist in implementing and documenting security policies, standards and guidelines.
• Maintain data in the GRC and Information Security Risk Management platforms under guidance.
• Help apply the Information Security Risk Management process, including data collection and follow‑up tracking.
• Support basic security risk assessments and prepare related documentation.
• Contribute to security KPIs, metrics, reports and governance meeting materials.
• Assist with compliance checks related to NIS2 and other internal/external requirements.
• Participate in security awareness, training campaigns and phishing exercises.

Required profile

• Completed studies in computer science, business informatics, information security or a comparable field.
• 0–2 years of experience in information security, IT governance, IT audit or risk management.
• Basic understanding of ISO 27001 and NIS2 requirements.
• Strong analytical, documentation and communication skills.
• Proficiency in English; German is a plus.
• High motivation to learn and contribute to a strong security culture.

Required skills

• ISO 27001
• NIS2
• GRC tools or IT risk management platforms

What we offer

• Continuing education through an in‑house academy.
• Supportive team with an open corporate culture.
• Company pension scheme and employee discounts.
• Attractive working environment close to top management with flat hierarchies.