Cyber Security Specialist - InfoSec

This position is newly created due to organizational transformation. There are brand new IT structures being built on Group level, and Cyber Security Specialist is one of such. An organization is in need of a Mid or Senior expert who will work within information security on group level.

Client Details

Our Client is a global company with consistent financial performance, strong brand recognition, and wide range of products and services. The company has a long history of innovation and has invested heavily in research and development, allowing it to stay ahead of the curve in terms of product offerings and market trends. Additionally, the organization has a solid reputation for corporate responsibility, sustainability, and environmental stewardship, which can be appealing to socially conscious investors.

Description

Conditions of working:

• Hybrid model (50/50),
• Only Perm Contract available (umowa o pracę).

Responsibilities:

• Support the definition of Cyber Security Strategy, aid Senior Management in its implementation.
• Ensure the application (ERP and non-ERP) and technology landscape are in compliance with cyber security expectations.
• Implement Cyber Security and Risk Management framework and procedures.
• Monitor Data Protection and Privacy Policy adherence - conduct Info Protection duties.
• Support identification and determination of critical business processes and assets and associated / supporting IT services.
• Identify security / compliance breaches through risk analysis - take steps to mitigate breaches.
• Conduct periodic or ad-hoc IT security audits.
• Support execution of information security risk assessments for third-party vendors and respond to information security diligence requests from external partners.
• Conduct analysis to propose improvements, such as implementation of new technology.
• Understand latest information technology security trends and benchmarks - discuss potential improvements with external service providers.
• Inform and raise cyber security concerns to Information Security Officer.
• Participate in Digital Foundations Community of Practice - coordinate local implementation with Local IT Specialists.
• Support assessment and maintenance of data security in line with data protection and privacy policy by deploying various processes and tools.
• Develop materials to conduct trainings and workshops where appropriate.

Profile

• Bachelor's Degree in computer science, management information systems (MIS) or related field or equivalent work experience.
• Mid or Senior level of experience in cyber security in a broad scope.
• Full business proficiency in English and local language.
• Experience implementing and maintaining an ISMS incl. related policy management, risk assessments, governance, and global training.
• Experience in Information security assessment and auditing procedures.
• Demonstrated experience identifying and remediating information security risks, as well as implementing security improvements.
• Extensive and proven knowledge on Cyber Security, Risk Management, and ideally Data Protection and Privacy.
• Knowledge of governance standards such as ISO 27001.
• CISSP, GIAC, OSCP, or related security and risk management certifications.
• Tech knowledge with good technical cyber security understanding to exchange with the outsourcing provider(s).
• Excellent communication, interpersonal and presentation skills incl. precise in wording of required documents and policies.

Job Offer

• Social benefits:
• EAP Employee Assistance Program,
• VIP medical care,
• Lunch Pass card,
• and transportation allowance.
• Financial benefits:
• annual bonus,
• free insurance packages,
• co-financing of the MultiSport card,
• development programs,
• and a number of free on-line courses.
• At work, our values are important to us:
• innovation,
• openness,
• flexibility,
• and attractiveness.