Information Security Manager

RSI Europe is a rapidly growing defense technology company based in Vilnius, Lithuania, developing and producing advanced remotely operated systems for modern military operations. Our mission is to empower armed forces with reliable, innovative, and field-proven solutions that enhance operational efficiency and safety.We're looking for an Information Security Manager to help protect our organization against evolving cyber threats. Your primary focus will be operating and continuously improving our Security Operations Center (SOC) monitoring, detecting, triaging, and responding to security incidents using Microsoft XDR and SIEM tooling. Alongside this, you'll own our NIS2 compliance efforts, acting as our point of contact with NKSC and ensuring our regulatory obligations are met, and incidents are reported and coordinated correctly. If you have hands-on SOC/SIEM experience, want to work with tools like Microsoft XDR, and are ready to help shape a company's security programme that's still actively maturing, we'd like to hear from you.

Key Responsibilities

Monitor, detect, triage, and respond to security incidents through SOC.Configure, tune, and continuously improve our SIEM use cases, correlation rules, and alerts.Work hands-on with Microsoft XDR for endpoint, identity, and cloud threat detection.Own our NIS2 compliance efforts, including risk assessments, controls, and regulatory reporting from a cybersecurity perspective.Act as our point of contact with NKSC on incident reporting, regulatory requirements, and threat intelligence sharing.Perform continuous security monitoring, threat hunting, and vulnerability management.Organize and coordinate penetration tests, including scoping, vendor coordination, and remediation follow-up.Identify and manage Shadow IT, including discovery of unauthorized applications/devices and enforcement of controls.Oversee physical security measures related to information security (e.g. access control, data center/server room security).Work with external stakeholders on building and maintaining documentation on cybersecurity.Investigate incidents, lead root-cause analysis, attack vectors and drive remediation.Develop and maintain playbooks, detection rules, and incident response procedures.Build out and mature security processes and policies across areas such as DLP, security awareness training, incident response, network security, email security, risk management, business continuity/disaster recovery, and third-party/vendor risk.Evaluate and manage security vendors, including budget input and vendor coordination.Collaborate with IT, infrastructure, and compliance teams to strengthen our overall security posture.Required qualifications:3+ years of experience in a SOC or security monitoring environment, ideally at senior/lead level.Strong hands-on experience with SIEM platforms.Solid understanding of NIS2 requirements and regulatory compliance in cybersecurity.Familiarity with ISMS structure and operation, ideally within an ISO 27001 environment.Experience with incident response, threat detection, and vulnerability management.Experience with Atlassian Jira, Jira Service Management or similar tools.Experience organizing or coordinating penetration testing.Understanding of Shadow IT risks and control mechanisms.Experience creating or maintaining security policies, procedures, risk registers, and incident response documentation.Strong analytical mindset and ability to work independently, especially in an environment where processes are still maturing.Ability to communicate security risks and priorities clearly to technical and non-technical stakeholders.Fluent English.Bonus qualifications:Hands-on experience with Microsoft XDR or Microsoft Sentinel, or comparable SIEM/XDR platforms.Prior experience working with or reporting to national cybersecurity authorities (e.g. NKSC).Experience with audit standards such as ISO 27001, NIS2, CRA, DORA, SOC2.Relevant certifications (e.g. CISSP, CISM, GCIA, GCIH, SC-200, or equivalent) are highly appreciated.Experience in a technology, SaaS, software development, fintech, or regulated environment.What we offer:Unique opportunity to join a high-growth company in the scaling stage.Opportunity to define and shape cybersecurity posture in the company.Opportunity to help Ukraine win.Flexible work hours.Frequent team-building events, free parking, a pet-friendly office, private health insurance after the probation period, and, of course, the best and most supportive team.Results-based bonuses.Competitive salary ranges from 4500 to 6000 eur gross. The final offer will depend on your qualifications, competencies, and professional experience.