Information Security Engineer (m/f/d)

In this role, you will help strengthen Northern Data’s security posture by maintaining the ISMS, governing policies, and coordinating audits. You’ll work with Compliance, IT, Engineering, Legal, HR, and business stakeholders to implement controls and improve governance. You’ll manage security documentation, risk assessments, and security metrics, while supporting security tooling and incident response. This is a hands-on position at the crossroads of governance and operations in a sustainability-driven HPC environment.

• home office / flexible remote work
• wellbeing initiatives
• diversity and inclusion focus
• hardware provided for work
• opportunity to shape security in a green datacenter ecosystem
• collaborative, non-hierarchical culture

• Maintain and improve the ISMS (ISO/IEC 27001) and lifecycle of security policies, standards, and guidelines
• Administer security documentation repositories (SharePoint, Confluence, Jira) with version control and action follow-up
• Maintain security registers (Asset, Risk, Exception, Action Tracker) and support data classification and DLP governance
• Lead audit preparation, evidence collection and tracking of findings to closure
• Support risk assessments, treatment plans, and periodic reviews; prepare security metrics and dashboards
• Coordinate security projects, reporting scope, milestones, risks and deliverables
• Collaborate with Compliance, Legal, IT, Engineering, HR and business stakeholders on governance matters
• Support implementation and improvement of security technologies and platforms
• Assist third-party security assessments, due diligence, and supplier assurance
• Support vulnerability remediation tracking, incident response activities, and security awareness initiatives
• Provide coordination and administrative support to other Security team members

• 5–7 years of Information Security, GRC, or Security Operations experience
• Solid understanding of ISMS and ISO/IEC 27001
• Experience with risk management methodologies and information security risk assessments
• Familiarity with regulatory requirements (NIS2, SOC 2, CIS Controls, GDPR)
• Experience managing documentation and workflows across SharePoint, Confluence, Jira
• Experience with DLP, information protection, and data classification solutions
• Experience with data analysis, reporting, dashboards and KPI measurement
• Experience in cross-functional environments with Infrastructure, IT, Platform Engineering, Compliance and Legal
• Familiarity with vulnerability management, security testing methodologies, and SIEM/EDR concepts

• cross-functional collaboration
• strong communication skills
• problem-solving and analytical thinking
• SharePoint
• Confluence
• Jira