We are looking for an Information Security Analyst to join AAK's growing global Information Security team.

In this role, you will help protect the company's IT environment by performing security checks, reviewing potential risks, supporting audits and improving security processes.

You will work closely with IT teams and business stakeholders across different countries, contributing to the development of AAK's information security practices and compliance with requirements such as NIS2.

This is a hands-on role with opportunities to grow your cybersecurity expertise. We are open to professionals with a strong IT infrastructure background who are interested in developing further in information security.

Your Responsibilities

• Perform regular security checks and controls across the organisation's IT systems.
• Review application security risks, vulnerabilities and user access permissions.
• Monitor and analyse security events and alerts, helping identify potential threats.
• Participate in cybersecurity incident investigations and response activities.
• Support internal and external security audits by collecting and preparing relevant evidence.
• Maintain security documentation and contribute to developing policies, procedures and standards within the Information Security Management System (ISMS).
• Work with IT teams, application owners and external partners on information security matters.
• Contribute to vulnerability management, third-party risk assessments and security awareness activities.
• Support improvements to the company's global information security processes.
• Depending on your interests and experience, take ownership of specific security tools or systems.

What We Are Looking For

• Approximately 5 years of hands-on experience in IT infrastructure, system administration or cybersecurity, ideally within an enterprise environment.
• Good knowledge of Windows infrastructure, particularly server environments.
• Understanding of Active Directory, networking, firewalls and infrastructure security principles.
• Ability to analyse technical issues, identify potential security risks and understand how IT systems are protected.
• Interest in cybersecurity and motivation to develop further in this area.
• Strong English communication skills, as you will work with international teams and stakeholders.
• A structured, analytical and proactive approach to work.

Additional technical knowledge valued:

• Experience with Azure and security tools.
• Familiarity with SIEM and GRC systems.
• Understanding of cybersecurity frameworks, standards and security management practices.