We are looking for a cybersecurity professional with strong experience in third-party risk management, security assessments and governance activities. Hybrid, 2 days a week from the office in Wroclaw.

Requirements:

• Minimum 5 years of professional experience in cybersecurity, information security, IT risk management or related areas.
• Minimum 3 years of hands-on experience performing third-party security assessments, supplier security reviews, technology risk assessments or similar activities.
• Demonstrated experience analyzing technical and security documentation and translating findings into actionable risk decisions.
• Experience working in large enterprise environments with multiple stakeholders and governance processes.
• Experience in collaborating with external suppliers and managing security-related discussions and follow-up activities.
Knowledge & Skills
• Strong understanding of cybersecurity principles and risk management practices.
• Practical knowledge of Third-Party Risk Management (TPRM), supply chain security and vendor risk assessment methodologies.
• Experience assessing security controls against recognized frameworks and standards, including:
o ISO 27001
o NIST Cybersecurity Framework
o SOC 2
o NIS2
o DORA
o CIS Controls
• Understanding of AI governance, AI-related risks and regulatory requirements such as the EU AI Act.

Research Scientist, Kaggle

Research Scientist, Kaggle

Security Risk Management Specialist

Więcej ofert w kategorii Cyberbezpieczeństwo

IT Security & Risk Officer

PKI Certificate Engineer

Database Security Analyst / Cyber Security Analyst

Praktyki - Cyber Security (ścieżka konsultingowa)

Senior CMP / M2M Consultant – Security & ENS Certification