Junior Information Security Specialist

About the project

The Junior Information Security Specialist supports the Information Security Team in protecting confidential data by monitoring threats, performing basic risk analysis tasks, and implementing security measures as well as monitoring policy compliance. They participate in maintaining compliance with internal policies and regulations, ensuring that basic security standards are met on a daily basis. This role is crucial for maintaining foundational security practices while providing the specialist with valuable experience to grow and develop further in the Cybersecurity field with an emphasis on the governance, risk, and compliance (GRC) domain.

Your responsibilities

• Security Policy: Assist with developing its provisions and monitoring the compliance level across Group Companies.
• Data Policy: Monitor compliance with its provisions and help define rules for sharing data outside the Allegro Group.
• Non-Disclosure Agreements (NDAs) & third parties: Conduct basic security risk reviews for NDAs and third-party data-sharing requests, advising Group Companies accordingly.
• Security awareness: Support the delivery of mandatory and non-mandatory training courses and initiatives to ensure appropriate levels of data security awareness among employees and contractors of Group Companies.
• Regulatory compliance: Assist with verifying the security measures used by Group Companies to ensure compliance with applicable security policies and regulations (DORA, NIS2, MAR, AI Act, GDPR, etc.) as well as information security principles, frameworks, and policies.
• Risk management: Provide basic support to employees of Group Companies in the identification and evaluation of various information security risks.
• Physical security: Assist in defining physical security requirements for offices and supervision of their implementation.
• Incident management: Support the development of incident response procedures and participate in administrative and operational handling of incidents.
• Corrective actions: Recommend basic corrective and improvement actions for Group Companies and monitor the process of their implementation.

Our requirements

• Experience: 0.5–2 years of experience (including internships or work placements) in information security, data protection, compliance, IT audit, or technical/legal consulting.
• Education: Degree (completed or in progress) in Law, Administration, Cybersecurity, Computer Science, IT Management, or a related field is preferred.
• GRC foundations: Basic understanding of information security management principles, risk assessment methodologies, and regulatory compliance.
• Regulatory awareness: Familiarity with major regulations (e.g. DORA, NIS2, AI Act, MAR, GDPR) and standard security frameworks (e.g. ISO/IEC 27001, NIST).
• Agreement review: Ability to review security and privacy contractual provisions (such as NDAs and data-sharing agreements) to identify organisational risk and to ensure appropriate security for various collaboration scenarios, both internal (within the Allegro Group) as well as external ones.
• Languages: Very good spoken and written English enabling seamless work with technical/legal documentation, regulations, and within an international team.
• Soft skills: Strong communication skills and diplomacy (ability to translate technical/legal requirements into clear business language), paired with analytical thinking and strong attention to detail.

What we offer

• Flexible working hours in a hybrid model (4/1) - our hours can start between 7:00 a.m. and 09:00 a.m. We also have 30 days of occasional remote work.
• Long term discretionary incentive plan based on Allegro.eu shares (restricted stock units).
• Annual bonus based on your annual performance and company results.
• Well-located offices (with e.g. fully equipped kitchens, bicycle parking, terraces full of greenery) and excellent work tools (e.g., raised desks, ergonomic chairs, interactive conference rooms).
• A wide selection of fringe benefits in a cafeteria plan - you choose what you like (e.g. medical, sports or lunch packages, insurance, purchase vouchers).
• English classes that we pay for related to the specific nature of your job.
• A training budget, inter-team tourism and an internal learning platform where you will find multiple trainings.
• An additional day off for volunteering, which you can use alone, with a team, or with a larger group of people connected by a common goal.
• Social events for Allegro people - Spin Kilometers, Family Day, Fat Thursday, and many other occasions we enjoy.

Benefits

• sharing the costs of sports activities
• private medical care
• sharing the costs of foreign language classes
• sharing the costs of professional training & courses
• life insurance
• flexible working time
• integration events
• no dress code
• leisure zone
• extra social benefits

#goodtobehere means that:

• You will shape the future of e-commerce - creating innovative, pioneering solutions that set new market standards. We have over 21 million active buyers across 6 countries and collaborate with more than 164k Partners.
• You will join a team you can always count on - we have on board top-class specialists who have sharing knowledge, experience, and best practices in their DNA. Want to get to know them better? Listen to the Allegro Podcast.
• You will be part of a team that always aims to stay one step ahead of the market - we act quickly, dynamically, and at the highest level, because only then we can genuinely shape the future of e-commerce.
• You will build your own development path - with access to diverse business areas, large-scale international projects, internal mobility, inter-team tourism, and regular feedback from your manager, you will drive your growth.
• You will see that mistakes are opportunities to learn - we believe that no matter how well we execute, we can always get better.