Information Security Officer (m/f)

Njuškalo is the largest Croatian marketplace with more than 1.1 million active users. We provide our users a simple and intuitive platform for buying and selling, and our employees with a pleasant business environment, a rich source of knowledge and the opportunity for growth and development. Our culture has been recognized with a Great Place To Work certificate that we obtained for the third year in a row.

We are looking for an Information Security Officer to play a key role in developing, implementing, and continuously improving our information and cybersecurity framework. In this role, you will be responsible for managing information security risks, ensuring compliance with relevant regulations, and strengthening security awareness across the organization.

• →Performing information security risk assessments, identifying potential vulnerabilities and threats, proposing risk response plans and measures to mitigate risks
• →Reporting to CTO on the security posture of the organization and providing recommendations to the CTO and other senior leaders on security-related issues
• →Advising organization on compliance with relevant laws, regulations, and industry standards related to information security
• →Collaborating with cross-functional teams to ensure that information security requirements are integrated into product design and development, IT operations, and other business processes
• →Providing security awareness training and education to all employees
• →Development and maintenance of incident response plans and procedures, and capability to address security incidents
• →Planning and conducting security audits and assessments to evaluate the effectiveness of security controls and identify areas for improvemen
• →Supporting the business in managing third-party vendors and partners to ensure that their security controls meet the organization’s standards and requirements

• Minimum 10 years of experience across information security, cybersecurity, risk management, and IT
• At least 3 years of experience in a leadership or senior advisory role related to information security
• Strong knowledge of information security standards and regulations
• Excellent knowledge of information security processes and controls 
• Strong knowledge on managing the cyber and IT threats and risks
• Knowledge of business management processes
• Relevant professional certifications in security
• Strong analytical and problem-solving skills
• Excellent communication, presentation, and stakeholder management skills
• Proactive mindset with a strong sense of ownership and accountability
• Fluency in Croatian and English, both written and spoken