Information Security Specialist

Work location: Lisbon

About the Role

The Information Security Specialist is Start Campus’ entry point into the Security department and reporting to the Head of Security & CISO. The role is execution-focused, covering the day-to-day audit evidence, compliance tracking and remediation follow-up that our certification programme relies on.

With the certification and compliance programme already up and running across ISO 27001, SOC 2 and an evolving regulatory landscape (NIS2, GDPR), the priority is keeping audits, evidence and remediation activities on track as the security programme scales. This is a great opportunity for someone early in their information security or compliance career to gain hands-on exposure, working alongside senior security leadership from day one.

Working closely with internal teams, auditors, vendors and third-party reviewers, the Information Security Specialist will help keep certification cycles, vendor reviews and governance meetings on track, and support the wider team as Start Campus’ security and compliance programme continues to grow.

Key Responsibilities

Audit and compliance support

• Support audit evidence coordination and control follow-up across active certifications.
• Maintain compliance trackers — policies, risks, remediation actions and exceptions.
• Assist with ISO 27001, SOC 2 and, from 2027, ISO 22301 audit cycles.

Vendor and governance support

• Support vendor and third-party security review activities.
• Help prepare and follow up on governance and management review meetings.

Tracking and follow-up

• Monitor deadlines and track remediation items through to closure.

Looking ahead

• Build growing exposure to the ISO 22301 business continuity certification, launching in 2027.
• Follow developments in the regulatory landscape (NIS2, GDPR) relevant to the security and compliance programme.

What We're Looking For

Qualifications and Experience (Must haves)

• A degree (or equivalent experience) in Information Security, IT, Law, Risk Management or a related field.
• 1–2 years of experience in information security, compliance, audit support or a related area.
• Basic familiarity with security or compliance frameworks (ISO 27001, SOC 2, GDPR, NIS2).
• Good written and spoken English.

Also valued (Nice to have)

• Recent graduates with a strong academic grounding in the above are welcome to apply.
• Prior exposure to certification audits (ISO 27001, SOC 2) or regulatory compliance work.

Skills and Competencies

• Strong organisational skills and attention to detail — comfortable managing trackers, deadlines and documentation.
• A proactive, rigorous and collaborative mindset, comfortable asking questions and learning on the job.
• Able to work closely with senior security leadership and multiple internal teams.