Information Security Operations Specialist

When every rating agency sees risk the same way, investors share the same blind spots. Scope Ratings offers a different view. As the leading European provider of independent credit ratings and fund research, we bring a European perspective to analysing risks through forward-looking methodologies, giving institutional investors worldwide an alternative to the US-based agencies. We are the only European credit rating agency accepted by the ECB as an external credit assessment institution in the Eurosystem. From Berlin, Frankfurt, London, Madrid, Milan, Oslo, Paris and Poznań, our analysts are building a strong European voice in global financial markets. At Scope Group, we are committed to fostering a diverse and inclusive workplace where everyone is treated with respect and fairness. We embrace people from all backgrounds, regardless of culture, ethnicity and gender. We ensure that our application processes are free from discrimination. By valuing each individual's unique background and perspectives, we strive to create an environment where all employees can thrive and contribute their best. Our dedication to equality and inclusivity reflects our belief that diversity drives innovation and success Summary We’re looking for an experienced Information Security Operations Specialist in Frankfurt to keep our technology environment secure day to day. You’ll work hands-on with Microsoft 365, Purview, Defender, Azure, identity and access management, and network security. The role connects security policy with daily operations. Working closely with IT, you’ll monitor threats, fix vulnerabilities, manage security settings and changes, and make sure we meet our internal policies and regulations such as DORA. Duties & responsibilities

• Run and improve our Microsoft 365 security tools, including Defender XDR, Defender for Cloud, Defender for Endpoint, Defender for Identity, Sentinel and Entra ID.
• Own security monitoring (SIEM and SOC) and work with external security providers to make sure threats and vulnerabilities are dealt with.
• Set up and manage data loss prevention (DLP) policies in Purview to stop sensitive data from leaving the company.
• Manage user identities and access in Entra ID, including single sign-on (SSO), Conditional Access and Privileged Identity Management (PIM), and watch for risky or suspicious sign-ins.
• Run the vulnerability management process: find, assess and prioritize vulnerabilities, and make sure they get fixed.
• Handle security tickets and requests in the ITSM queue and respond to security incidents.
• Keep Azure and our wider infrastructure secure through security baselines, configuration reviews and hardening.
• Oversee security for enterprise applications and business services.
• Make sure we comply with DORA, and help the IT, Risk and Compliance teams put the Group Information Security Strategy into practice.
• Carry out first-line security controls and reviews, fix findings and escalate risks.
• Support internal and external audits, regulatory inspections, penetration tests and control assessments.
• Review technology changes from a security point of view and give approvals and recommendations.
• Lead the response to major ICT incidents, including communication, escalation, stakeholder updates and post-incident reviews, and report them to regulators as DORA requires.

Professional & personal qualifications

• 5+ years of hands-on experience in information security operations
• 3+ years of experience with Microsoft 365 and cloud environments (ideally Azure)
• Degree in computer science, IT, cyber security or a related field, or equivalent experience
• Experience securing Microsoft 365 (Intune, SharePoint, Teams, Exchange) through the Microsoft security portals
• Experience with Entra ID, including Identity Protection, Privileged Access Management and Conditional Access
• Hands-on experience with DLP in Purview
• Good understanding of network security, such as firewalls, VPNs and intrusion detection/prevention
• Microsoft security certifications (SC-900, SC-200, SC-300 or SC-400) are a plus
• Familiarity with DORA, ISO 27001 or NIST
• Able to meet deadlines, stay calm under pressure and keep others on track
• Fluent English, written and spoken; German is a plus

Compensation Range: The compensation range disclosed may encompass multiple title levels (Scope internal levels of seniority). Your actual compensation will depend on a variety of factors, including but not limited to your individual experience, education, and seniority, and the final salary will be determined during the interview and evaluation process. Pay Range: Senior Specialist - Information Security Operations Minimum: 68.000 EUR Maximum: 85.000 EUR Bonus: Discretionary Benefits: Scope offers an extensive range of benefits, please check our benefits page for more details. Interested? If this sounds like a journey for you, we look forward to learning more from your convincing application. Please note: For non-EU applicants, a valid work and residence permit is a prerequisite for this job position. Unfortunately, we are unable to sponsor relocation from outside of the EU at this time. What we want to see

• Current English CV
• Copy of your university degrees and certificates
• Criminal record certificate (can be provided at a later date)
• At least 3 letters of reference (can be provided at a later date)

About Scope When every rating agency sees risk the same way, investors share the same blind spots. Scope Ratings offers a different view. As the leading European provider of independent credit ratings and fund research, we bring a European perspective to analysing risks through forward-looking methodologies, giving institutional investors worldwide an alternative to the US-based agencies. We are the only European credit rating agency accepted by the ECB as an external credit assessment institution in the Eurosystem. From Berlin, Frankfurt, London, Madrid, Milan, Oslo, Paris and Poznań, our analysts are building a strong European voice in global financial markets. At Scope Group, we are committed to fostering a diverse and inclusive workplace where everyone is treated with respect and fairness. We embrace people from all backgrounds, regardless of culture, ethnicity and gender. We ensure that our application processes are free from discrimination. By valuing each individual's unique background and perspectives, we strive to create an environment where all employees can thrive and contribute their best. Our dedication to equality and inclusivity reflects our belief that diversity drives innovation and success Compensation Range: The compensation range disclosed may encompass multiple title levels (Scope internal levels of seniority). Your actual compensation will depend on a variety of factors, including but not limited to your individual experience, education, and seniority, and the final salary will be determined during the interview and evaluation process. Pay Range: Bonus: Contractual OR Discretionary Benefits: Scope offers an extensive range of benefits, please check our benefits page for more details. Senior Specialist - Information Security Operations (Frankfurt) EUR 68000 85000