Job Description

MET Group is an integrated European energy company, headquartered in Switzerland, with activities in natural gas and power, focused on multi‑commodity wholesale, trading and sales, as well as energy infrastructure and industrial assets.

The Group is represented in 24 countries: Albania, Austria, Belgium, Bosnia and Herzegovina, Bulgaria, Czech Republic, Croatia, France, Germany, Greece, Hungary, Italy, North Macedonia, Moldova, Poland, Romania, Serbia, Singapore, Slovakia, Spain, Switzerland, The Netherlands, Turkey and Ukraine.

MET is present in 33 national energy markets and 51 international trading hubs. The Group has a significant end‑consumer presence in Belgium, Croatia, Italy, Hungary, Romania, Slovakia, Spain, and The Netherlands.

The company has 1400+ permanent staff. The company is owned 90% by MET employees and 10% by Keppel Infrastructure, a wholly owned subsidiary of Keppel Corporation*.

* Listed on the Singapore Exchange

Responsible for supporting the Group IT Security team in managing cybersecurity compliance activities across MET Group. The role focuses on cybersecurity due diligence (KYC), internal and external audit support, and cybersecurity evaluations of partners, vendors, and assets. The analyst will ensure that MET Group's cybersecurity posture meets regulatory, contractual, and internal policy requirements.

Essential responsibilities:

• Conduct cybersecurity due diligence assessments on new and existing counterparties, vendors, and partners as part of the onboarding and periodic review process.
• Assess and classify counterparty cyber risk levels according to internal policies and regulatory requirements. Implement/develop/configure SIEM use cases.
• Support the preparation and execution of internal and external cybersecurity audits, including NIS2, CER, and regulatory inspections.
• Liaise with internal audit, legal, and compliance teams to ensure cohesive audit readiness.
• Participate in cybersecurity maturity assessments and gap analyses for MET Group entities, assets, and newly acquired companies.
• Assist in benchmarking cybersecurity practices against MET Group standards, industry frameworks and regulatory requirements.
• Monitor and track compliance with MET Group's Information and Cyber Security Policy and related guidelines across entities.
• Contribute to regulatory compliance monitoring related to NIS2 and sector-specific regulations.

Qualifications

• Fresh graduate or 1–2 years of experience in cybersecurity, compliance, audit, or risk management.
• Basic understanding of cybersecurity frameworks and standards.
• Familiarity with KYC/due diligence processes and third-party risk assessment concepts.
• Strong analytical and organizational skills with excellent attention to detail.
• Ability to manage multiple tasks, track deadlines, and maintain accurate documentation.
• Very good English language skills, both verbal and written

Advantages

• Professional experience in an international / multi-cultural business environment.
• Practical experience with virtual teamwork and cross-country collaboration.
• Basic understanding of cybersecurity frameworks and standards.
• Familiarity with KYC/due diligence processes and third-party risk assessment concepts.
• Strong analytical and organizational skills with excellent attention to detail.
• Ability to manage multiple tasks, track deadlines, and maintain accurate documentation.
• Excellent problem-solving, troubleshooting, reasoning skills.

Additional Information