Cyber Risk & Strategy Consultant

Jacobs; Kraków; Hybrid; PLN 180,000 - 240,000; Full time

Benefits offered by this job

Hybrid work model

Flexible hours

Comprehensive benefits

Global projects

Diversity networks

Job summary

Jacobs is seeking a Cyber Security Risk Specialist in Poland to help assess and mature global cyber postures, bridging business and technical teams. The role emphasizes threat/risk assessments, complex program management, and secure-by-design principles across IT and OneTrust environments.

You will collaborate with security leaders and engineering teams, ensuring regulatory alignment and practical security requirements. Hybrid work with two days in Kraków or Warsaw is offered.

Qualifications

• Bachelor's degree in cybersecurity, information technology, CS, or related field.
• Proven consulting experience delivering cyber security risk assessments, strategy, or assurance projects for external clients.
• Experience applying core industry frameworks and standards (NIST CSF, ISO 27001, IEC 62443, NCSC CAF, NIS/NIS2).
• Strong understanding of cyber security principles, operating models, and program management (Agile/Waterfall).
• Relevant cyber security qualifications (CISSP, CISM, CRISC, SABSA).
• Strong stakeholder management; ability to communicate complex risk to executives.
• Strong GRC knowledge; proficient in governance and compliance concepts.
• Professional working proficiency in English.

Responsibilities

• Support client engagements to develop cyber strategies, workflows, and target operating models.
• Conduct threat and risk assessments across IT/OT environments to guide security decisions.
• Design and deliver complex cyber security programs aligned with regulations and client goals.
• Collaborate with clients' security leaders and engineering teams to translate security frameworks into requirements.
• Support governance, risk management and reporting to keep initiatives on track and delivering value.

Skills

Cybersecurity risk assessment

Stakeholder management

GRC knowledge

English proficiency

Education

Bachelor's degree in Cybersecurity

Tools

NIST CSF

ISO 27001

IEC 62443

NCSC CAF

NIS/NIS2

Job description

At Jacobs, we're challenging today to reinvent tomorrow by solving the world's most critical problems for thriving cities, resilient environments, mission-critical outcomes, operational advancement, scientific discovery and cutting-edge manufacturing, turning abstract ideas into realities that transform the world for good.

Your impact

Hybrid work model Candidates are required to work from our Kraków or Warsaw office at least two days per week. The remaining working days may be performed remotely from home.

We are looking for a Cyber Security Risk Specialist to help support our clients in assessing and maturing their global cyber security postures, whilst helping cyber teams develop their strategies and target operating models. In this role, you will bridge the gap between business, technical teams and cyber leadership (e.g., CISOs,) to build practical, scalable cyber strategies and operating models for our clients. In parallel, you will focus heavily on conducting threat and risk assessments, managing complex cyber programs, and ensuring robust security alignment across IT and OneTrust environments.

Responsibilities

• Support client engagements relating to the development of cyber strategies, technical workflows, and target operating models
• Conduct comprehensive threat and risk assessments across complex IT and/or OT environments, helping clients make proportionate and cost-effective security decisions.
• Support the design and delivery of complex cyber security programs, ensuring alignment with client objectives, regulatory requirements, and the evolving cyber threat landscape.
• Work closely with clients’ security leaders, architects, and engineering teams to embed secure-by-design principles and translate security frameworks into practical technical requirements.
• Support effective program governance, risk management, and reporting to ensure security initiatives remain on track, mitigate risks, and deliver business value.

Qualifications

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Telecommunications, Engineering, or a related field.
• Proven consulting experience delivering cyber security risk assessments, strategy, or assurance projects for external clients in complex or highly regulated environments.
• Practical experience applying and interpreting core industry frameworks and standards, such as NIST CSF, ISO 27001, IEC 62443, NCSC CAF, or NIS/NIS2.
• Strong understanding of cyber security principles, operating models, and program management methodologies (e.g., Agile, Waterfall).
• Relevant cyber security qualifications (such as CISSP, CISM, CRISC, SABSA).
• Strong stakeholder management skills, with the ability to communicate complex cyber risk topics to senior executives and navigate ambiguous technical challenges.
• Strong foundational knowledge of enterprise Governance, Risk, and Compliance (GRC) principles.
• Strong analytical, problem-solving, and communication skills.
• Professional working proficiency in English.

Nice to have

• Background working with critical national infrastructure, including energy, water, transport, civil nuclear, or smart infrastructure sectors.
• Experience working with cloud security, OT/IoT security, or digital security architectures.
• Familiarity with related cyber security disciplines such as third-party risk management, data governance & privacy, AI governance, and operational Resilience
• Knowledge in designing and developing custom AI Agents in relation to cyber security
• Relevant program management qualifications (such as PRINCE2, MSP, or AgilePM)

We offer

• Rewarding employment - full-time employment with a salary that matches your qualifications
• Hybrid work model - enjoy the flexibility of working mostly from home
• Flexible hours - start your day anytime between 730 and 1000 AM
• Comprehensive benefits, including Lux Med medical care, psychological support, life insurance, My Benefit cafeteria system, Multisport card co-financing, and a car/bike park sharing system
• Co-financed holidays - enjoy "Wczasy pod Gruszą" for a well-deserved break
• Global projects - engage in exciting international projects
• Inclusive networks - join our diverse employee networks like Women's Network, OneWorld, PRISM, Careers Network, Green Team, SpeakUp, Collectively, and more
• Continuous learning - participate in our Graduate Development Program, Learners’ Community, and self-learning platforms
• Language courses - enhance your skills with courses in English, German, and Polish

We know that if we are inclusive, we’re more connected, and if you’re diverse, we’re more creative. We accept people for who they are, regardless of age, disabilities, gender identity, gender expression, marital status, mental health, race, faith or belief, sexual orientation, socioeconomic background, and whether you’re pregnant or on family leave. Find out more about life at Jacobs. As a Disability Confident employer, we will interview all disabled applicants who meet the criteria for a vacancy.