Information Security Support Specialist (m/f/d)
An information-security generalist role in Allianz Technology's Digital Resilience function, driving security initiatives across Customer & Sales IT — vulnerability management, IAM, pentest coordination, and Risk Shield governance using tools like Archer, ServiceNow, and Confluence — in an agile hybrid team based in Barcelona. Open to career starters with 0–3 years of experience.
- Compensation
- Not disclosed
- Location
- Not listed
- Work setup
- Hybrid
- Seniority
- Not specified
- Employment
- Contract
- Experience
- 0+ years
- Category
- Security
- Posted
Skills
Must have
- Bachelor's degree in IT, Information Security, Business Informatics, or related field — or equivalent practical experience
- 0–3 years of professional experience in information security, IT compliance, IT governance, or a related field (career starters welcome)
- Basic understanding of or genuine interest in infosec topics such as vulnerability management, source code security, IAM, authorization concepts, pentest coordination, or incident management
- Understanding of regulatory frameworks and internal security standards (e.g., AFRIT, corporate rulebooks)
- Proficiency in Microsoft Office (Excel, Word, PowerPoint) and collaboration tools (MS Teams, SharePoint, Confluence)
- Willingness to learn enterprise tools such as ServiceNow, ADOIT, Archer, Presto, and GIAM
- High degree of self-initiative and self-organization
- Exceptional communication skills with technical and non-technical audiences in a complex stakeholder landscape
- Comfortable working in agile, hybrid teams across different locations and organizations
- Reliable, structured working approach with excellent follow-up discipline
- Fluent in English
Nice to have
- German language skills
- Experience in an agile IT environment (tribes, squads, agile ceremonies)
- Interest in Generative AI tools and their application in security and process improvement
- Relevant certifications or coursework in information security (e.g., ISO 27001, ITIL, or similar)
Full description
About the Job
Digital Resilience is a central function within Allianz Technology, responsible for ensuring that IT services across the group meet regulatory and internal information security standards. Within Customer & Sales IT (CSI), a department in the CT1GER function, we work in agile, hybrid teams consisting of Allianz Technology and Allianz Deutschland colleagues. Our team drives information security governance and challenging security initiatives across multiple tribes and squads.
We are looking for a proactive and communicative Information Security Support Specialist to join our agile team and help us strengthen the security posture of CSI – taking ownership of diverse IS initiatives and supporting the Risk Shield governance process.
As an Information Security Support Specialist, you act as a generalist within the Digital Resilience function, taking on challenging information security initiatives across CSI. This is not about ticking boxes – it's about driving real improvements in a complex stakeholder environment where self-initiative, self-organization, and strong communication are key to success. You work as part of an agile, hybrid team and collaborate closely with tribes, squads, and central security functions.
What you do
- Take ownership of and drive challenging IS initiatives across CSI, including topics such as vulnerability management, source code scanning, Identity & Access Management (IAM), authorization concepts, and toxicity remediation.
- Coordinate and support pentest activities, liaising between external/internal testers, application teams, and ISOs to ensure findings are addressed.
- Contribute to risk management activities, including supporting the lifecycle of information risks in Archer and Presto. Assist in audit preparation and audit support, ensuring evidence readiness and tracking of open findings.
- Support the Allianz Risk Shield (ARS) process within CSI, assisting teams through the evaluation, attestation, evidence, and completion phases. Navigate a complex stakeholder landscape across CSI tribes and squads, ISOs, central IS functions, and management – communicating effectively at all levels.
- Help coordinate Risk Shield cycles, including stakeholder communication, timeline tracking, and issue follow-up. Assist with data verification and maintenance in tools such as ServiceNow, ADOIT, Presto, and Archer.
- Gather, structure, and document IS knowledge on Confluence, SharePoint, and Wiki pages, contributing to a well-maintained knowledge base for the team and our AI agents. Proactively identify gaps, raise issues, and propose solutions – taking shared responsibility for the team's success.
- Stay up to date on evolving IS topics, including new threats, regulatory changes, and internal initiatives. Explore the use of GenAI tools (e.g., Claude Enterprise) to improve documentation, reporting, and process efficiency.