VACANCY ANNOUNCEMENT
Information Security Officer
Department: Information Systems | Reports to: Information Systems Director | Location: Tirana, Albania
BALFIN Group is one of the most successful investment groups in the Western Balkans. Established in 1993, the Group today operates across Austria, Albania, Kosovo, Bosnia and Herzegovina, Croatia, North Macedonia, Switzerland, Montenegro, the Netherlands, Canada and the United States of America.
Its diversified portfolio spans multiple sectors, including banking, real estate development, wholesale and retail, asset management, tourism, logistics, education and entertainment. With a workforce of approximately 5,500 professionals, BALFIN Group continues to grow steadily, guided by strong business ethics, financial stability, innovation and a long-term commitment to community impact through Mane Foundation.
Overview
Leads the Information Security function and team across all BALFIN Group companies, both local and international. Governs the ISMS in accordance with ISO/IEC 27001, manages security risk and ensures that security is an integral part of the business strategy and digital transformation.
Main responsibilities
- Leads and develops the Information Security team; designs and implements the Group’s security strategy
- Leads information security governance in line with international standards (ISO/IEC 27001, NIST); develops and maintains security policies, procedures and standards
- Leads the security risk assessment programme, including BIA (Business Impact Analysis) and supplier risk
- Ensures compliance with legal and regulatory requirements for cybersecurity and personal data protection
- Oversees security operations and protective technologies (SIEM, EDR, email and network security)
- Leads the management of critical security incidents and takes part in BCP/DR plans
- Integrates “Security by Design” into digital transformation projects and new systems before they go into production
- Manages the information security awareness and training programme
- Reports regularly to the Information Security Committee and Executive Management on security risks, projects and maturity
Requirements
- University degree (Master’s preferred) in Computer Science, Computer Engineering, Cybersecurity or a related field
- Internationally recognised professional certifications such as CISSP, CISM and/or ISO/IEC 27001 Lead Implementer/Lead Auditor; CRISC, CISA, technical certifications (e.g. CEH, OSCP) or cloud security certifications are an advantage
- At least 5 years of experience in information security or related fields, of which at least 2 years in a leadership/managerial role
- Proven experience in building, implementing and governing an ISMS in accordance with ISO/IEC 27001 and in managing security risk
- In-depth knowledge of security technologies and architectures: SIEM, EDR/XDR, email security, network security (firewall, IDS/IPS, segmentation), IAM/PAM, cloud security and vulnerability management
- Organisational and planning skills to manage the team and time, and to meet deadlines and objectives
- Written and verbal communication skills that allow you to inform and advise others clearly
- Commitment to continuous professional development
- Interpersonal skills that enable you to work with people at all levels
- Able to handle stress and deliver within tight deadlines
- Able to work in a team
- Very good command of English (written and spoken)
What we offer
- An attractive benefit package, including fair remuneration based on merit and performance evaluation
- An exceptional opportunity to develop your skills and grow within BALFIN Group
- Recognition rewards
- Flexible working hours
VACANCY ANNOUNCEMENT
Information Security Officer
Department: Information Systems | Reports to: Information Systems Director | Location: Tirana, Albania
BALFIN Group is one of the most successful investment groups in the Western Balkans. Established in 1993, the Group today operates across Austria, Albania, Kosovo, Bosnia and Herzegovina, Croatia, North Macedonia, Switzerland, Montenegro, the Netherlands, Canada and the United States of America.
Its diversified portfolio spans multiple sectors, including banking, real estate development, wholesale and retail, asset management, tourism, logistics, education and entertainment. With a workforce of approximately 5,500 professionals, BALFIN Group continues to grow steadily, guided by strong business ethics, financial stability, innovation and a long-term commitment to community impact through Mane Foundation.
Overview
Leads the Information Security function and team across all BALFIN Group companies, both local and international. Governs the ISMS in accordance with ISO/IEC 27001, manages security risk and ensures that security is an integral part of the business strategy and digital transformation.
Main responsibilities
- Leads and develops the Information Security team; designs and implements the Group’s security strategy
- Leads information security governance in line with international standards (ISO/IEC 27001, NIST); develops and maintains security policies, procedures and standards
- Leads the security risk assessment programme, including BIA (Business Impact Analysis) and supplier risk
- Ensures compliance with legal and regulatory requirements for cybersecurity and personal data protection
- Oversees security operations and protective technologies (SIEM, EDR, email and network security)
- Leads the management of critical security incidents and takes part in BCP/DR plans
- Integrates “Security by Design” into digital transformation projects and new systems before they go into production
- Manages the information security awareness and training programme
- Reports regularly to the Information Security Committee and Executive Management on security risks, projects and maturity
Requirements
- University degree (Master’s preferred) in Computer Science, Computer Engineering, Cybersecurity or a related field
- Internationally recognised professional certifications such as CISSP, CISM and/or ISO/IEC 27001 Lead Implementer/Lead Auditor; CRISC, CISA, technical certifications (e.g. CEH, OSCP) or cloud security certifications are an advantage
- At least 5 years of experience in information security or related fields, of which at least 2 years in a leadership/managerial role
- Proven experience in building, implementing and governing an ISMS in accordance with ISO/IEC 27001 and in managing security risk
- In-depth knowledge of security technologies and architectures: SIEM, EDR/XDR, email security, network security (firewall, IDS/IPS, segmentation), IAM/PAM, cloud security and vulnerability management
- Organisational and planning skills to manage the team and time, and to meet deadlines and objectives
- Written and verbal communication skills that allow you to inform and advise others clearly
- Commitment to continuous professional development
- Interpersonal skills that enable you to work with people at all levels
- Able to handle stress and deliver within tight deadlines
- Able to work in a team
- Very good command of English (written and spoken)
What we offer
- An attractive benefit package, including fair remuneration based on merit and performance evaluation
- An exceptional opportunity to develop your skills and grow within BALFIN Group
- Recognition rewards
- Flexible working hours
