Information Systems Security Coordinator

About the role

28Stone is an IT consulting company specialising in capital markets technology and financial infrastructure, helping major financial institutions operate more efficiently through custom software. It is looking for an Information Systems Security Coordinator in Riga to coordinate application vulnerability remediation and AppSec governance with engineering, DevOps and product teams.

Key responsibilities

• Coordinate and oversee application vulnerability remediation with engineering, DevOps and product teams, aligned with enterprise security governance.
• Manage and track application onboarding into approved AppSec scanning tools (SAST, DAST, SCA) and monitor scan outputs, triaging findings and communicating risk-based remediation guidance.
• Support governance by coordinating policy exceptions, waivers and risk acceptances, and document AppSec, DevSecOps and GRC processes and controls.
• Lead cross-functional remediation working sessions with engineering teams, platform owners and third-party vendors.
• Enforce secure coding and DevSecOps policy compliance and escalate non-compliance to engineering leadership and risk owners.
• Identify and manage orphaned or unowned applications in AppSec tooling, and develop dashboards showing application risk posture, vulnerability trends and remediation progress.
• Support internal audits, regulatory assessments and external reviews with accurate compliance evidence and remediation records.

Required profile

• Bachelor's degree in computer science, information security or a related field.
• At least 3 years of experience in vulnerability management, security coordination or a related IT security role.
• Experience tracking remediation timelines and SLA compliance, and coordinating across multiple teams.
• Excellent written and verbal English, with strong follow-up and coordination across teams.
• Right to work in Latvia; the stated gross pay varies with skills and experience.

Required skills

• Hands-on vulnerability management with at least one of: Invicti, SonarQube, Sonatype or Tenable.
• Advantage: data encryption concepts, CI/CD pipelines and DevOps workflows, and ServiceNow or similar ticketing systems.

What we offer

• Gross pay of 2,500-3,800 EUR, with flexible hours and the option to work from home in Latvia or one of the offices.
• Health insurance and mental wellness platform from day 1, annual training budget, and paid mobile phone bills.
• Sports community (gym membership deal, volleyball team, monthly challenges) and social events.
• Loyalty rewards, bi-weekly lunches, board game nights and team-building events.
• Modern, ergonomic office with free snacks, tea and coffee, and additional paid sick leave for emergencies.