Your objectives is to ensure that in our current and future mergers and acquisitions we identify and manage risks through the assessments of our M&A target security controls.

Your responsibilities

• Conduct cybersecurity due diligence and communicate identified risks
• Track and follow up on identified remediations
• Based on identified remediations you will to some extend advice the companies on remediating your findings from due diligence conducted.
• Help build and maintain the “team.blue Information Security Standards”
• Continuously improve the processes around M&A cyber information security due diligence
• Manage third-party providers who provide cyber security assessments on large acquisitions
• Together with the rest of Group Security build template policies, procedures and guides to help less mature companies to mature their information security systems

Your skillset
You should have a solid background in technical security or experience in IT audit/compliance. The ability to evaluate implemented security measures is more critical than expertise in conducting due diligence on a target.

• We expect you to have 5+ years of experience within information security or technology with an emphasis on security controls.
• Good English skills both verbal and written
• Good at communicating risks to both technical teams, management and senior stakeholders.
• Good collaboration skills as you will be working with many different stakeholders
• Broad knowledge of cybersecurity controls
• Broad knowledge of security standards such as ISO 27001, CIS Critical Controls
• Knowledge of GDPR regarding relevant technical security measures

It is a plus if you

• Have knowledge of NIS, HIPAA, PCI DSS and similar regulations and standards
• Certification in CISSP, ISO 27001 Implementer/auditor, CISM, CRISC or similar
• Can communicate in several European languages.

Working environment
You will be working closely with the Group CISO and the rest of the Technology organisation, working alongside the M&A Project Implementation managers and wider M&A Team. You will also be part of Group Security which consists of 12 colleagues working within information security in team.blue.
You can work from one of our offices (see locations list in the bottom), fully remote or in a hybrid setup. The job does not require travel besides from the occasional team or company event.

3 reasons to apply for this job

• The opportunity to use your broad knowledge of information security and technology
• Working in an international environment
• Flexible working environment