Information Security Officer

Wherever our customers are in the world, we help them digitalise and optimise their remote business processes using advanced hybrid network solutions and digital technologies. At Marlink, we empower our customers worldwide by helping them digitalize and optimize their remote operations through advanced hybrid network solutions and cutting-edge digital technologies. Our teams operate globally, harnessing innovation, expertise, and applied technology to connect systems and people, driving success in today’s digital-first world. With 1,500 employees in over 30 countries, and customers in the maritime, energy, and government sectors, we push boundaries to deliver excellence. 

The Information Security Officer will play a key role in shaping a strong cybersecurity culture across countries and primarily within our organization. 

You would be responsible for enforcing the Group’s information security strategy, policies and frameworks, ensuring a consistent and effective cybersecurity posture across the growing Marlink Cyber. The role ensures compliance with applicable legal, regulatory, and contractual requirements and oversees the maintenance and continuous improvement of information security certifications and standards.

In addition, the position works closely with Group functions, internal teams, regulators, and other external stakeholders to support audits, risk management and secure business growth.

RESPONSIBILITIES

• Enforce the Group’s information security strategy, policies, standards, and frameworks across the Marlink Cyber company.
• Develop, maintain, and continuously improve the Information Security Management System (ISMS) in line with ISO/IEC 27001 and other applicable standards.
• Ensure compliance with applicable legal, regulatory, and contractual information security requirements (e.g. GDPR, NIS2, client obligations).
• Own and coordinate information security certification activities, including preparation for internal and external audits and ongoing certification maintenance.
• Safeguard the cybersecurity posture of internal operations, products and services, and client-facing environments.
• Conduct and oversee information security risk assessments and support risk treatment planning in collaboration with business and technical stakeholders.
• Act as the primary point of contact for information security audits, assessments, and client assurance activities.
• Promote and embed a strong cybersecurity culture across countries through awareness, guidance, and collaboration with internal teams.
• Advise product, delivery, and commercial teams on information security requirements to enable secure and compliant business growth.
• Coordinate with Group functions and external partners to ensure alignment, reporting, and continuous improvement of information security practices.

QUALIFICATIONS

• University degree in Information Security, Computer Science, Engineering, or a related field, or equivalent professional experience.
• 5+ years of professional experience in information security, cybersecurity, or GRC roles, with demonstrated responsibility for governance, risk, compliance, and information security management.
• Strong knowledge of relevant legal, regulatory, and industry requirements (e.g. GDPR, NIS2, ISO standards, client security requirements).
• Hands-on experience with information security risk management, audits, and compliance activities.
• Experience supporting or leading certification and audit processes (e.g. ISO/IEC 27001, SOC 2, or similar frameworks).
• Ability to work effectively in a cross-country, organization and collaborate with technical, business, and Group stakeholders.
• Strong communication and stakeholder management skills, with the ability to translate security and compliance requirements into practical guidance.
• Professional certifications such as ISO/IEC 27001 Lead Implementer/Lead Auditor, CISSP, CISM, or similar are considered an advantage.

What we offer: 

• Growth in an open-minded culture with very little hierarchical macrostructure.
• Opportunity to achieve your biggest potential and development in your area of responsibility.
• Continuous development and advancement through industry-relevant certifications and internal/external training/workshops.
• Challenging local and global projects involving current solutions.
• Learning and sharing experiences with well-known and respected experts in the field of information/cybersecurity.
• Positive, motivating, international work environment.
• Hybrid work – office work + possibility of working from home by agreement.
• Flexible working hours.
• Additional and supplementary health insurance packages.
• Monthly fee for transportation.
• Multisport membership.
• Pet-friendly office.
• Social events and team bonding gatherings.