Security Assurance Specialist

Key Responsibilities

• Develop and maintain mechanisms to promote a strong information security culture across the organization.
• Design and deliver comprehensive information security awareness and training programs for all employees, including role-specific training where required.
• Continuously review and improve security policies and procedures in line with the evolving threat landscape.Build and maintain a centralized information security knowledge repository to support audits and knowledge sharing.

Security Risk Management

• Implement and maintain the information security risk assessment methodology, policies, and processes.
• Assess the organization s overall risk posture by conducting regular risk assessments across all information assets.
• Develop and maintain up-to-date information security risk profiles.
• Define, track, and review risk mitigation plans, ensuring timely follow-up and appropriate escalation of identified risks.

Security Compliance

• Monitor and ensure compliance with Delivery Hero (DH) and HungerStation (HS) information security policies, standards, guidelines, and procedures.
• Proactively manage ongoing compliance, certifications, and re-certifications against relevant security standards and regulations.
• Coordinate and support internal and external audits, ensuring timely and accurate fulfillment of audit requirements.

Overall Governance & Resilience

• Adhere to established policies, procedures, and processes to ensure work is carried out in a consistent and controlled manner.
• Identify and contribute to continuous improvement opportunities to enhance security processes and operational effectiveness.
• Promote a high-performance culture while upholding HungerStation s values and commitment to resilience and security excellence.

Knowledge & Experience

• 4 6 years of relevant experience in information security, risk, governance, or compliance roles.
• Strong hands-on knowledge of information security risk assessment and risk management frameworks.
• Deep technical understanding of information security controls and their practical implementation.
• Proven experience managing and conducting internal and external information security audits.
• Experience designing and delivering end-to-end information security awareness and training programs across organizations.

Education & Certifications

• Bachelor s degree in Computer Science, Computer Engineering, or a related field.
• At least two of the following certifications are mandatory: CISSP, CRISC, CISA, CISM, ISO/IEC 27001 Lead Implementer (LI) or Lead Auditor (LA), or equivalent.