Associate Information Security Specialist

Skopje, Zagreb, Split, hybrid

DEPT® is a Growth Invention company built to help the world’s most ambitious brands grow faster. Operating at the intersection of technology and marketing, our 4,000+ specialists deliver growth invention services across Brand & Media, Experience, Commerce, CRM, and Technology & Data. We’re 50|50 tech and marketing, partner-led, and first to move. Clients include Google, Lufthansa, Meta, eBay, and OpenAI. We have been certified B Corp and Climate Neutral since 2021.

JOB PURPOSE
We are looking for a motivated Associate Information Security Specialist to join our growing security team in Croatia or North Macedonia. This role is a career-accelerating entry point for an ambitious professional looking to shape themselves under top-tier mentorship. 

You will work alongside our Information Security Officer to support audits, ISMS related operational tasks, and map our company-wide AI inventory. In the long term, you will transition into a direct-report role under our returning Global Information Security Officer, stepping up to take continuous support of our dual ISO 27001 and ISO 42001 compliance lifecycles.

• →You will coordinate and document routine security control monitoring activities, including access reviews, security checklists, and asset onboarding verification.
• →You will act as the central operational coordinator for building and maintaining our AI use-case inventory register in ISMS.Online, gathering system metrics from departments across the global organization.
• →You will facilitate and support system impact assessments, data collection for risk registers, and tracking remediation metrics.
• →You will perform standard information security due diligence reviews of new vendors, tools, and SaaS solutions.
• →You will help update, deliver, and track completion records for company-wide annual security and AI acceptable-use training.

• ISMS Adherence & Maintenance: you will live our security practices by rigorously following and helping to maintain the records, documentation, and operational workflows of our ISMS.
  
• Proactive Organization-Wide Communication: you will act as an approachable champion for security, answering routine team questions and proactively pushing clear updates and awareness reminders out to the organization regarding best practices.
• Work hands-on alongside internal systems, product, and IT teams: you will help bridge the gap between our high-level security experts and internal engineers, assisting them in executing and tracking technical security measures.
• Incident Response Mobilization: you will provide immediate operational support during security incidents by gathering data, documenting timelines, and assisting the broader response team in quick resolution.
• Business & Client Support: you will assist the commercial team in answering client RFIs and security questionnaires accurately, playing a proactive role in keeping data security top-of-mind for our clients.
• Practical Fieldwork with Business Teams: you will actively step into our business units to learn how they function day-to-day. Using ISO frameworks as a clear starting point, you will help identify how the security team can better support their unique operational workflows.
• Vendor & Audit Coordination: you will maintain close communication with our software vendors during procurement to verify their security stance. You will organize and prepare evidence packages to support internal audits, external audits, and client due diligence reviews.
• Executive Team Insights Support: you will help aggregate security performance metrics, identify vulnerabilities, and prepare reporting materials that give the executive team clear visibility into our security posture and improvement areas.
• AI-Powered Efficiency: you will actively explore, suggest, and experiment with internally sourced AI compliance tools to automate tedious compliance logging and documentation tasks, helping our lean security team work much more efficiently.

•  1–3 years of foundational experience in IT, sys administration, system auditing, or a junior security / compliance role.
• Framework Knowledge: Basic theoretical or working knowledge of Information Security principles (ISO 27001, SOC 2, or CIS controls). 
• Core Skills: Excellent organizational, documentation, and stakeholder communication. You must be comfortable reaching out to engineering and product teams to gather asset information.
• Growth Mindset: High coachability and excitement for deep diving into the cutting-edge requirements of AI security compliance (ISO 42001).

We are a Growth Invention company built to help the world’s most ambitious brands grow faster. Operating at the intersection of technology and marketing, we create what is next by pioneering ideas, acting fast, and moving further because standing still just is not in our DNA.

We are drawn to people who stay curious, move with intent, and never stop inventing. Our culture runs on three values: better together, relentlessly curious, and get sh*t done. It is how we work, how we grow, and how we make things that matter.

At DEPT®, you will find the freedom to explore, the space to collaborate, and the trust to make a real impact for our clients, for each other, and for the world we are helping to build.

DIVERSITY, EQUITY & INCLUSION 

At DEPT®, we take pride in creating an inclusive workplace where everyone has an equal opportunity to thrive. We actively seek to recruit, develop, nurture, and retain talented individuals from diverse backgrounds, with varying skills and perspectives.

Not sure you meet all qualifications? Apply, and let us decide! Research shows that women and members of underrepresented groups tend not to apply for jobs when they think they may not meet every requirement, when in fact they do. We believe in giving everyone a fair chance to shine.

We also encourage you to reach out to us and discuss any reasonable adjustments we can make to support you throughout the recruitment process and your time with us.

Want to know more about our dedication to diversity, equity, and inclusion? Check out our efforts here.