Information Security & Compliance Specialist (mid-senior)

Company: Copla

Location: Vilnius, hybrid (at least 3 days a week in the office)

Salary: €4,500–7,000 gross/month, depending on experience. The upper range is for candidates with hands-on audit and compliance experience and a relevant certification.

About the role

Copla provides a GRC platform, dedicated tools for the DORA Register of Information and third-party risk management (TPRM), and hands-on CISO-as-a-Service to 150+ companies across the EU. Our clients range from fintechs and payment institutions to SaaS, manufacturing and healthcare companies. We’re growing our CISO team and looking for a colleague who will help clients build, run and prove their information security and compliance programmes under ISO 27001, DORA, NIS2, ISO 42001, GDPR and other frameworks. You’ll join a team of information security professionals and work with real clients from day one, guided by our Head of CISO.

What you will do

Client delivery

• Act as a day-to-day security and compliance contact for a portfolio of clients
• Run gap analyses and define the steps to close them
• Facilitate risk assessments and business impact analyses
• Prepare clients for certification and regulatory audits, and support them during the audits

Documentation and controls

• Draft and keep up to date policies, procedures and registers for each client’s context, including asset, risk and vendor registers
• Map controls to various framework requirements, and keep that mapping current as requirements change

Evidence and internal reviews

• Collect and assess evidence that controls work, such as access reviews, logs, configurations and backup tests
• Carry out internal audits and compliance checks, report non-conformities and track corrective actions to closure

Product and team

• Use Copla tools (GRC platform, DORA ROI and TPRM) in your daily work
• Give feedback to Product and Content teams so that Copla tools improve

What we expect

• 3+ years in information security, IT audit, risk or compliance
• Hands-on experience with at least one of ISO 27001, DORA, NIS2 or GDPR, and understanding of the others
• Clear, structured communication with clients from different backgrounds, from technical teams to management, including people new to security
• Clear, structured writing; you can turn a requirement into a policy someone will actually follow
• Strong attention to detail
• Ability to manage several clients and deadlines at once, build and follow through on plans, and keep the commitments you make to each client
• Fluent Lithuanian and English, written and spoken
• A degree in IT, cybersecurity, information systems, risk management or a related field, or equivalent experience

Nice to have

• Certifications such asCISA, CISM, ISC2 CC or CISSP
• Experience with cloud or SaaS environments
• Experience in financial services, consulting or a B2B startup

What we offer

• €4,000–7,000 gross per month (the upper range is for candidates with hands-on audit and compliance experience and a relevant certification)
• Work across many industries, frameworks and real audits, which builds experience faster than an in-house role would
• Paid certifications and training
• The chance to shape a growing compliance platform
• Hybrid work and flexible hours

How to apply

Email Ieva, Head of Operations, at ieva@copla.com with your CV or LinkedIn profile and a short answer (up to 200 words) to this question:

A new client, a payment institution in scope of DORA, has no documented ICT risk management framework. What would you do in your first 30 days?

Hiring process: 2–3 interviews with our Head of CISO, Head of Operations and CTO.

Applications sent any other way won’t be considered.