About the role We are looking for an Information Security Compliance Engineer to join our Quality & Compliance team. You will support the development of our security framework, internal audits, and client-facing compliance activities, ensuring alignment with international standards and regulations. Tech stack: ISO/IEC 27001 (ISMS) TISAX / VDA ISA GDPR NIS2 ISO-based management systems (e.g., ISO 9001) Requirements: 2–4 years of experience in information security / compliance / risk (IT environment preferred) Practical knowledge of ISO/IEC 27001 (ISMS, audits, controls, corrective actions) Good understanding of GDPR and data protection Familiarity with NIS2 Ability to assess security controls (governance perspective) Very good English (spoken and written) Strong analytical skills and attention to detail Ability to communicate clearly with technical and non-technical stakeholders Self-driven mindset and ability to manage multiple topics independently Professional approach, high integrity, and attention to confidentiality Nice to have: Experienced in using AI tools in day-to-day workflow Experience with TISAX / VDA ISA Knowledge of ISO 9001 or similar ISO 27001 Lead Auditor or CISA certification Experience in consulting roles Project description: You will join an independent Quality & Compliance function and help maintain and develop the organization’s information security compliance framework. The role includes internal assurance work (e.g., internal audits and continuous improvement) and client-facing activities (e.g., customer audits, security questionnaires, and due diligence). You will act as a trusted advisor for both internal stakeholders and external clients, providing clear and actionable guidance on security and compliance topics. Main responsibilities: Maintain and improve ISMS (ISO 27001, TISAX) Support internal and external audits Identify compliance gaps and track improvements Create and update policies, standards, and procedures Support GDPR, NIS2, and other regulatory requirements Assist with customer audits and security questionnaires Provide basic advisory support to clients Conduct high-level security and compliance assessments