Senior Information Security Analyst (m/f/d)

Position Overview

• Location Type:
• Job Type: Full-time
• Salary:

Kraken is a technology company focused on creating a smart, sustainable energy system. We are looking for a Senior Information Security Analyst with at least 4 years of relevant experience to be at the forefront of compliance and security automation.

About Kraken Customer

Kraken Customer builds the most AI-driven, innovative, forward-thinking platform for energy management. This includes optimizing resources, delivering cost-effective, exceptional customer experiences through advanced Customer Information Systems (CIS), billing, meter data management, CRM, and AI-driven communications.

Why Kraken?

We are transforming the energy space and the way information security and compliance are managed, aiming for state-of-the-art continuous, automated, and repeatable processes. If you’re passionate about Information Security and driving a positive security culture, we encourage you to apply.

Responsibilities

• Support the implementation and automation of security processes and requirements.
• Help expand our security assurance function.
• Perform security risk assessments and risk management.
• Maintain existing certifications (ISO 27001, SOC 1 and 2) and lead on attaining additional relevant certifications in the future.
• Maintain and improve our Information Security Management System (ISMS) and associated policies, guidelines, standards, and procedures.
• Perform third-party security assessments and manage third-party security risks.
• Promote a positive security culture and raise awareness through training and other initiatives.
• Provide security advice and guidance to the wider technical team.
• Liaise with stakeholders in relation to security issues and provide future recommendations.
• Automate Kraken’s audit & compliance programs, enabling easy demonstration of compliance as we scale.
• Be part of the Kraken Information Security team, working with Privacy and Cyber Security functions to align security controls across Kraken businesses.
• Get involved in other security-related projects and initiatives as needed.
• Take on new challenges that align with your skills and interests, and collaborate with other teams to drive improvements in security across the organization.

Requirements

• Understanding of modern software technologies and automation (using low or no code tools to automate audit and compliance tasks).
• Good understanding and practical experience of the principles/issues involved in Security & Technology Risk Management.
• Good understanding and practical experience of the principles/issues involved in Third Party Security Due Diligence.
• Previous experience implementing and/or maintaining an Information Security Management System (ISMS) in accordance with ISO 27001.
• Good understanding of information security and the ability to communicate this to people who aren’t subject matter experts.
• Previous experience working in certified organizations where you’ve led compliance audits and performed security risk assessments.
• Good experience in at least some of the areas mentioned above (not expecting expertise in all areas).