Information Security Engineer

Transport is at the core of modern society. Imagine using your expertise to shape sustainable transport and infrastructure solutions for the future. If you seek to make a difference on a global scale, working with next-gen technologies and the sharpest collaborative teams, then we could be a perfect match.

What You Will Do

• Run supplier security assessments (questionnaires + evidence reviews) covering areas such as governance, risk management, IAM, secure SDLC maturity (at organizational level), vulnerability management, incident response, BCP/DR, third-party management, and privacy.
• Evaluate assessment responses and evidence, validate claims, and identify gaps against frameworks/requirements (e.g., ISO 27001, NIST CSF, SOC 2 reports, etc.).
• Produce clear supplier risk summaries: maturity scoring, key gaps, risk rating, and recommended remediation actions.
• Lead supplier follow-ups: clarifying questions, evidence requests...