Information Security Expert for the EU Agency AMLA in Frankfurt am Main – Interim/Zeitarbeit

We are looking for an Information Security Expert (M/F/D) for a multinational client in Frankfurt/Main, the EU Agency Authority for Anti-Money Laundering and Countering the Financing of Terrorism AMLA.

Client:

• The Authority for Anti-Money Laundering and Countering the Financing of Terrorism (AMLA) is a decentralised EU agency that coordinates national authorities to ensure the correct and consistent application of EU rules. The aim of the EU Authority is to transform the anti-money laundering and countering the financing of terrorism (AML/CFT) supervision in the EU and enhance cooperation among financial intelligence units (FIUs).
• At the AMLA you can become part of an international and multicultural team presently in its set-up phase.

 Main tasks:

The purpose of the Information Security function is to establish, implement, and support the operationalisation of AMLA’s information security policy framework, ensuring that the Authority’s information assets are protected in line with international standards, regulatory expectations, and the organisation’s risk appetite. The function enables a structured, coherent, and consistent approach to security governance by developing policies, procedures, and controls aligned with ISO/IEC 27001, supporting their adoption across AMLA, and preparing the organisation for effective compliance, audit readiness, and secure day-to-day operations.

• Support preparation, refinement and operationalisation of AMLA Information Security Policies, standards and related procedures (policy lifecycle, approvals, publication, periodic review).
• Draft and maintain AMLA information classification and handling framework and practical handling instructions (e.g., internal sharing, external exchange, storage, printing, retention, disposal), including FIU-related sensitive handling scenarios.
• Establish governance processes and artefacts: SOPs, control catalogue/baselines, RACI, metrics, and an exceptions / risk acceptance process (intake, approval, expiry, compensating controls, reporting).
• Define and support implementation of secure collaboration requirements (e.g., secure file sharing, secure email/external exchange, encryption and key management principles, DLP requirements as applicable), in close coordination with IT for feasible technical enforcement.
• Develop and support rollout of policy awareness and role-based guidance for system owners and staff; support training materials and acknowledgements.
• Prepare audit/readiness evidence packs and support internal assessments and policy compliance tracking; follow up remediation actions with stakeholders.
• Contribute to procurement/contracting where relevant by defining information security requirements (handling clauses, secure exchange expectations, supplier obligations) for services handling AMLA information.

Qualifications:

Essential: University degree (or equivalent experience) in information security, risk/governance, IT, law/policy, or related field.

Advantageous: Formal training/certifications in security governance or information assurance (e.g., CISSP, CISM or equivalent).

Professional Experience:

Essential:

• Minimum 3 years of hands-on experience drafting and operationalising information security policies/standards/procedures, ideally in a regulated/public sector environment.
• Practical experience with information classification/handling and secure information exchange/collaboration controls.

Advantageous:

• Experience supporting audit readiness, evidence collection, and compliance tracking against internal controls.
• Experience with sensitive information environments (financial supervision, law enforcement, EU institutions, etc.).

IT Skills:

Advantageous: Working knowledge of collaboration security controls in M365 (labels/classification, conditional access concepts, encryption options, DLP concepts) to translate policy into enforceable requirements (in partnership with IT).

Language Skills:

Essential: Excellent written and spoken English.

Other skills and competences:

• Excellent drafting skills; able to produce clear, implementable policies and procedures (not “paper only”).
• Strong stakeholder management and pragmatism: translate requirements into workable processes and adoption.
• High discretion and integrity due to sensitive information handling.

Remuneration:

• Above market level salary
• German interim employment contract (Zeitarbeitsvertrag/Arbeitnehmerüberlassung)

Location: Frankfurt/Messeturm

Start date: 15. March 2026, approx.

End date: 6 months

Please send us your CV at:  jobs@infeurope.lu

Reference:  12/2026INFSECEXP

infeurope S.A. represents a consortium of infeurope Luxembourg and DEKRA Arbeit GmbH, Stuttgart.