Information Security Support Specialist

About the Job Digital Resilience is a central function within Allianz Technology, responsible for ensuring that IT services across the group meet regulatory and internal information security standards. Within Customer & Sales IT (CSI), a department in the CT1GER function, we work in agile, hybrid teams consisting of Allianz Technology and Allianz Deutschland colleagues. Our team drives information security governance and challenging security initiatives across multiple tribes and squads. We are looking for a proactive and communicative Information Security Support Specialist to join our agile team and help us strengthen the security posture of CSI – taking ownership of diverse IS initiatives and supporting the Risk Shield governance process. As an Information Security Support Specialist, you act as a generalist within the Digital Resilience function, taking on challenging information security initiatives across CSI. This is not about ticking boxes – it's about driving real improvements in a complex stakeholder environment where self-initiative, self-organization, and strong communication are key to success. You work as part of an agile, hybrid team and collaborate closely with tribes, squads, and central security functions. What you do
• Take ownership of and drive challenging IS initiatives across CSI, including topics such as vulnerability management, source code scanning, Identity & Access Management (IAM), authorization concepts, and toxicity remediation.
• Coordinate and support pentest activities, liaising between external/internal testers, application teams, and ISOs to ensure findings are addressed.
• Contribute to risk management activities, including supporting the lifecycle of information risks in Archer and Presto. Assist in audit preparation and audit support, ensuring evidence readiness and tracking of open findings.
• Support the Allianz Risk Shield (ARS) process within CSI, assisting teams through the evaluation, attestation, evidence, and completion phases. Navigate a complex stakeholder landscape across CSI tribes and squads, ISOs, central IS functions, and management – communicating effectively at all levels.
• Help coordinate Risk Shield cycles, including stakeholder communication, timeline tracking, and issue follow-up. Assist with data verification and maintenance in tools such as ServiceNow, ADOIT, Presto, and Archer.
• Gather, structure, and document IS knowledge on Confluence, SharePoint, and Wiki pages, contributing to a well-maintained knowledge base for the team and our AI agents. Proactively identify gaps, raise issues, and propose solutions – taking shared responsibility for the team's success.
• Stay up to date on evolving IS topics, including new threats, regulatory changes, and internal initiatives. Explore the use of GenAI tools (e.g., Claude Enterprise) to improve documentation, reporting, and process efficiency. What you bring
• Bachelor's degree in Information Technology, Information Security, Business Informatics, or a related field – or equivalent practical experience, with 0–3 years of professional experience in information security, IT compliance, IT governance, or a related field. Motivated career starters with strong academic backgrounds are welcome.
• Basic understanding of or genuine interest in information security topics such as vulnerability management, source code security, Identity & Access Management, authorization concepts, pentest coordination, or IT security incident management.
• Understanding of regulatory frameworks and internal security standards (e.g., AFRIT, corporate rulebooks). Proficiency in Microsoft Office (Excel, Word, PowerPoint) and collaboration tools (MS Teams, SharePoint, Confluence). Willingness to learn and work with enterprise tools such as ServiceNow, ADOIT, Archer, Presto, and GIAM.
• High degree of self-initiative and self-organization – you proactively identify what needs to be done, take ownership of initiatives, and drive them forward without constant guidance. Exceptional communication skills – you can navigate a complex stakeholder landscape across tribes, squads, ISOs, and management, and you communicate effectively with both technical and non-technical audiences.
• Comfortable working in agile, hybrid teams with colleagues across different locations and organizations. Reliable, structured working approach with excellent follow-up discipline. Genuine curiosity and eagerness to learn in a fast-evolving field.
• Fluent in English (required). German language skills are not required but an advantage (given the close collaboration with Allianz Deutschland).
• Nice to have: Experience in an agile IT environment (tribes, squads, agile ceremonies). Interest in and openness to Generative AI tools and their application in security and process improvement. Relevant certifications or coursework in information security (e.g., ISO 27001, ITIL, or similar).

What we offer
•

We offer
a hybrid work model which recognizes the value of striking a balance between in-person collaboration and remote working incl. up to 25 days per year working from abroad.
• We believe in rewarding performance and our compensation and benefits package includes a company bonus scheme, pension, employee shares program and multiple employee discounts (details vary by location).
• From career development and digital learning programs to international career mobility,

we offer
lifelong learning for our employees worldwide and an environment where innovation, delivery and empowerment are fostered.
• Flexible working, health and wellbeing offers (including healthcare and parental leave benefits) support to balance family and career and help our people return from career breaks with experience that nothing else can teach.