Information Security Engineer
No salary listed
Senior
Bachelor's
Frankfurt, Germany
In PersonHome-office work is available, but the posting does not specify a remote or hybrid attendance arrangement.
CybersecuritySecurity Governance, Risk & Compliance
About the job
Requirements
- A bachelor's degree in Information Security, Cyber Security, Computer Science, or a related discipline is required.
- Five to seven years of experience in Information Security, Governance, Risk, and Compliance (GRC), or Security Operations is required.
- A solid understanding of Information Security Management Systems (ISMS) and security governance frameworks, such as ISO/IEC 27001, is required.
- Experience with risk management methodologies and conducting information security risk assessments is required.
- Familiarity with security compliance frameworks and regulatory requirements, such as NIS2, SOC 2, CIS Controls, and GDPR, is required.
- Experience managing documentation, registers, and workflows across enterprise collaboration platforms such as SharePoint, Confluence, and Jira is required.
- Experience with Data Loss Prevention (DLP), information protection, and data classification solutions is required.
- Experience with data analysis, reporting, dashboard development, and Key Performance Indicator (KPI) measurement is required.
- Experience working in cross-functional environments with Infrastructure, IT, Platform Engineering, Compliance, and Legal teams is required.
- Familiarity with vulnerability management processes and vulnerability assessment tools is required.
- Familiarity with security testing methodologies and tools, such as vulnerability scanning, security validation, or penetration testing support, is required.
- Familiarity with security monitoring, Security Information and Event Management (SIEM) platforms, and incident detection concepts is required.
- Familiarity with Endpoint Detection and Response (EDR) and endpoint security technologies is required.
Responsibilities
- Maintain and continually improve the ISO/IEC 27001 Information Security Management System (ISMS).
- Own the lifecycle of security policies, standards, procedures, and guidelines, including drafting, review cycles, approvals, and publication through SharePoint and Confluence.
- Administer Information Security documentation repositories, knowledge bases, and workflow platforms, including SharePoint, Confluence, and Jira; manage version control, review schedules, and follow up on overdue actions.
- Own and maintain Information Security registers, including the Asset Register, Risk Register, Exception Register, and Action Tracker, ensuring data quality and timely updates.
- Support enterprise information asset management and data classification, including governance of data loss prevention (DLP) and sensitivity-labelling technologies.
- Lead audit preparation, evidence collection, and logistics for internal and external audits; track findings, observations, and corrective actions through closure.
- Support Information Security risk assessments, treatment plans, and periodic reviews across the business.
- Prepare Information Security metrics, dashboards, Key Performance Indicators (KPIs), and management reports.
- Coordinate Information Security projects by tracking scope, milestones, risks, dependencies, actions, and deliverables.
- Partner with Compliance, Legal, IT, Engineering, HR, and business stakeholders on governance matters.
- Support the implementation, configuration, administration, and continuous improvement of Information Security technologies and platforms.
- Support third-party security assessments, due diligence questionnaires, and supplier assurance activities.
- Track vulnerability remediation, escalate overdue items, and report on remediation progress.
- Support security incident response activities, including documentation, coordination, evidence collection, and post-incident improvement actions.
- Support security awareness and communication initiatives.
- Support security reporting, KPI tracking, and management updates.
- Provide coordination and administrative support to other Information Security team members.
Desired Qualifications
- Basic understanding of Identity and Access Management (IAM), authentication, and privileged access management concepts.
- Basic understanding of networking, TCP/IP, DNS, routing, switching, and network security principles.
- Basic understanding of web technologies and web application security concepts.
- Basic understanding of cloud security concepts and shared responsibility models.
- Fundamental scripting or automation skills, such as PowerShell or Python, are advantageous.
About the company
Northern Data Group builds and operates its own data centers to provide high-performance computing and artificial intelligence infrastructure for AI workloads, blockchain, bitcoin mining, and big data analytics. Its services work by offering scalable HPC resources hosted in renewable-powered facilities, giving customers access to compute and GPU-accelerated power via a cloud-like platform. Unlike many peers, it owns and runs its renewable data-center footprint and is pursuing a Europe-wide Generative AI Cloud to serve large-scale AI applications, while considering selling its mining business to sharpen focus. Its aim is to become a leading provider of AI solutions and infrastructure by delivering reliable, scalable compute and AI capabilities at scale.
Company Size
51-200
Company Stage
IPO
Headquarters
Frankfurt, Germany
Founded
2017
Get referred to Northern Data Group
See people who can refer or advise you
Simplify's Take
What believers are saying
- RUM Group reported Q2 2026 revenue of $40.4 million, up 61% year over year.
- Quake AI already has 85% GPU utilization, with a $3 billion annual run-rate target.
- Tether's September 2, 2026 share transfers increase liquidity and validate Northern Data's asset value.
What critics are saying
- RUM Group targets 100% ownership, making Northern Data's standalone equity disappear by late 2026.
- Aroosh Thillainathan resigned June 17, 2026, and board turnover weakens execution during integration.
- Any failure to monetize 250MW by 2027 leaves stranded capex, hardware depreciation, and layoffs.
What makes Northern Data Group unique
- Northern Data built 22,000 H100 and H200 GPUs before RUM Group closed June 17, 2026.
- Its Taiga Cloud and Ardent data centers target liquid-cooled, high-density AI workloads across Europe.
- September 2026 squeeze-out notices show rare ownership of compute, power, and balance-sheet control.
Help us improve and share your feedback! Did you find this helpful?
Benefits
- Flexible Work Hours
- Hybrid Work Options
- Remote Work Options
- Wellness Program