Information Security Specialist (IT)

About the role

RONAL GROUP is looking for an experienced Information Security Specialist to strengthen its Information Security Management System (ISMS) in the Czech Republic. You will work on applying international standards and regulatory frameworks to protect the company’s IT environment and ensure compliance across the group.

Key responsibilities

• Develop, implement and maintain cybersecurity policies, standards and procedures.
• Conduct risk assessments, threat modeling, vulnerability assessments, technical security audits and penetration testing.
• Prepare and support internal and external audits and certifications such as TISAX, IATF 16949, ISO/IEC 27001 and ISO 31000.
• Monitor security alerts, respond to incidents and manage follow‑up actions.
• Lead improvements in detection and response workflows with SOC and IT stakeholders.
• Organize and evaluate external penetration testing and vulnerability scans.
• Operate and improve security infrastructure including SIEM, EDR, IDS/IPS and firewalls.
• Supervise vulnerability remediation, patch cycles and endpoint protection.
• Plan and deliver cybersecurity awareness campaigns and training.

Required profile

• Degree in information security, computer science or a related technical discipline.
• Minimum 3 years experience in a similar role, preferably in an international company.
• At least 5 years of technical experience implementing security concepts and controls.
• Familiarity with SOC/CSIRT operations.
• Professional certifications such as ISO/IEC 27001, CISSP or TISAX auditor are a plus.

Required skills

• SIEM
• EDR
• IDS/IPS
• Firewalls
• Penetration testing
• Vulnerability scanning
• Risk assessment
• Threat modeling
• Security audits
• ISO/IEC 27001
• TISAX
• IATF 16949
• ISO 31000