Governance, Risk

Hornetsecurity keeps businesses around the world safe
- and now we’re looking for someone in Hem (59) who’s just as passionate about security as we are. As an Information Security Specialist (m/f/d), you’ll design, build, and strengthen the defenses that thousands of organizations rely on every day. Ready to take on meaningful challenges in a team that moves fast and builds smart? Let’s go. Your Job
• You Lead security projects
• Own end-to-end delivery of security initiatives: from scoping and risk assessment to rollout and sign-off.
• Embed security requirements in product/IT projects (design reviews, threat modeling, test plans).
• Keep stakeholders aligned and the backlog moving—timelines, deliverables, budgets, and RAID logs.
• You run technical audits
• Plan and execute technical security audits across network, endpoint, application, and cloud.
• Coordinate and/or perform vulnerability assessments and penetration tests (internal & third-party).
• Produce crisp findings, prioritized remediation plans, and track closure to “done.”
• You support SecOps
• Partner with SOC: review SIEM alerts, refine detections/use cases, and help with playbooks.
• Assist incident response: triage → investigate → contain → eradicate → lessons learned.
• Strengthen hygiene: hardening, access governance, logging, and patch cadence.
• You keep us compliant & aware
• Contribute to ISO 27001 controls and readiness (policy updates, SoA evidence, internal audits).
• Support GDPR in projects (privacy by design, DPIAs, data minimization, breach procedures).
• Champion secure-by-default habits with training and lightweight enablement sessions.

Your Profile
• You hold a Master’s degree or engineering diploma in IT, computer science, or cybersecurity.
• You bring around 3 years of relevant professional experience.
• Must-Have Skills &

Qualifications:
• First experience in auditing technical systems (configuration, architecture…).
• Hands-on with audit tooling and translating results into actionable engineering tasks.
• Understanding of usual technologies and architectures used in business.
• Technical writing and the ability to explain complex topics simply.
• Comfortable running risk assessments and translating policy/control language into practical steps.
• Clear communicator who can brief execs and coach engineers—with strong documentation skills.
• Strong command of written and spoken English and German/French; additional languages are a plus.
• Proactiveness and solution-oriented mindset.
• Nice-to-Have Skills / Added Advantage:
• ISO 27001 Lead Auditor/Implementer.
• CISSP/CISM.
• OSCP.
• PMP/Prince2.
• NIST / CIS control matrix.
• Technology / Tools Knowledge:
• Knowledge of security standards (ISO 27001, NIST CSF, CIS Controls, OWASP (Top 10, ASVS), GDPR) and Development Methodologies (DevsecOps, Agile).
• SIEM/SOAR (e.g., Sentinel, Splunk), EDR/XDR, vulnerability management (Qualys/Nessus), SAST/DAST.
• Cloud security (Azure/AWS/GCP), containers/K8s, identity (SSO/MFA/FIDO2), modern auth patterns.
• GRC Tool management and automation to simplify our compliance process.
• ITIL V4 level (start with foundation). Your Benefits
• Employment status: Executive / Exempt employee
• Working time scheme: Hour-based annual package (forfait heures)
• Time off: 5 weeks of statutory paid leave + RTT (additional rest days)
• Meal vouchers: €10 per voucher (including a €5.92 employer contribution by Hornetsecurity)
• 100% coverage of public transportation costs
• Health & life insurance (Axa)
• Sports and wellness benefits (subsidy)
• International exchange program