Information Security Officer (m/f)

Njuškalo is the largest Croatian marketplace with more than 1.1 million active users. We provide our users a simple and intuitive platform for buying and selling, and our employees with a pleasant business environment, a rich source of knowledge and the opportunity for growth and development. Our culture has been recognized with a Great Place To Work certificate that we obtained for the third year in a row.

We are looking for an Information Security Officer to play a key role in developing, implementing, and continuously improving our information and cybersecurity framework. In this role, you will be responsible for managing information security risks, ensuring compliance with relevant regulations, and strengthening security awareness across the organization.

Your responsibilities will include:

• Performing information security risk assessments, identifying potential vulnerabilities and threats, proposing risk response plans and measures to mitigate risks
• Reporting to CTO on the security posture of the organization and providing recommendations to the CTO and other senior leaders on security-related issues
• Advising organization on compliance with relevant laws, regulations, and industry standards related to information security
• Collaborating with cross-functional teams to ensure that information security requirements are integrated into product design and development, IT operations, and other business processes
• Providing security awareness training and education to all employees
• Development and maintenance of incident response plans and procedures, and capability to address security incidents
• Planning and conducting security audits and assessments to evaluate the effectiveness of security controls and identify areas for improvemen
• Supporting the business in managing third-party vendors and partners to ensure that their security controls meet the organization’s standards and requirements

What we are looking for

• Minimum 10 years of experience across information security, cybersecurity, risk management, and IT
• At least 3 years of experience in a leadership or senior advisory role related to information security
• Strong knowledge of information security standards and regulations
• Excellent knowledge of information security processes and controls 
• Strong knowledge on managing the cyber and IT threats and risks
• Knowledge of business management processes
• Relevant professional certifications in security
• Strong analytical and problem-solving skills
• Excellent communication, presentation, and stakeholder management skills
• Proactive mindset with a strong sense of ownership and accountability
• Fluency in Croatian and English, both written and spoken

What we offer

• Hybrid work possibilities after onboarding period
• Co-financed Multisport card
• Annual medical check-ups
• Benefits for parents (financial support after your baby is born, 4-hour work day for mothers in the first month after parental leave)
• Day off for your birthday and other life milestones
• Equipment suitable for all your needs
• Dog-friendly offices for your furry friends
• 22-30 vacation days (depending on tenure and age)

Ready to Make an Impact?
If you're excited about shaping secure and trusted digital environment for millions of users, we'd love to hear from you.