Senior Information Security Expert

I

What you do:

• Govern IS across the service lifecycle — Ensure effective implementation of Information Security principles and controls throughout the full lifecycle of services delivered by Allianz Technology, including those provided by third parties and outsourcing partners.
• Manage IS risk — Conduct risk assessments, evaluate control effectiveness, identify policy deviations, and develop actionable mitigation strategies aligned with the organization's risk appetite.
• Drive IAM transformation — Ensure the rollout and adoption of the IAM target operating model in alignment with Group requirements; oversee onboarding of local applications to centralized IAM solutions and services.
• Provide IS advisory & stakeholder engagement — Act as a trusted advisor to business and IT stakeholders, liaise with regional and central IS teams, and champion a security-first culture.
• Lead incident response coordination — Manage Information Security incidents end-to-end, coordinating cross-functional response and ensuring timely resolution and lessons learned.
• Coordinate vulnerability remediation — Participate in the vulnerability management process, prioritize findings based on risk, and drive remediation activities with IT and business owners.
• Promote security awareness — Design and deliver engaging training materials, awareness campaigns, and regular communication bulletins to elevate security culture across the organization.

What you bring:

• Deep IS expertise — Strong knowledge of IT security technologies, architectures, processes, and ISMS frameworks (e.g., ISO 27001/27002), including regulatory requirements such as DORA and NIS2.
• GRC & IAM experience — 5+ years of relevant hands-on experience in information security Governance, Risk, & Compliance and proven experience with Identity & Access Management processes and tools.
• Solid IT foundation — 3+ years IT background with focus on information security and/or risk management.
• Project management skills — Demonstrated ability to align teams, set expectations, and follow through complex enterprise projects.
• Communication & influence — Excellent English written and verbal communication skills with the ability to translate technical risks into business language for diverse audiences.
• Certifications - One or more of the following is highly desirable: ISO 27001 Lead Auditor, CISSP, CISM, or CompTIA Security+. Equivalent certifications in information security, risk management, or IT governance will also be considered.
• AI security awareness — Understanding of security risks, threats, and governance challenges associated with Artificial Intelligence and Machine Learning systems (e.g., adversarial attacks, model poisoning, data leakage, prompt injection, shadow AI usage). Ability to assess AI systems against risk classification requirements and organizational policies.

What we offer:

• Offer a hybrid work model balancing in-person collaboration and remote work.
• Provide a comprehensive compensation and benefits package, including bonuses, pension, health insurance, employee shares, and discounts.
• Support lifelong learning through career development, digital learning programs, and international mobility, fostering innovation and empowerment.
• Present excellent career opportunities in insurance, asset management, and banking, with active communication across Allianz Group and key functions.

102808 | IT & Tech Engineering | Professional | Non-Executive | Allianz Bulgaria | Full-Time | Permanent