Cyber Risk & Strategy Consultant

Jacobs; Kraków; Hybrid; PLN 180,000 - 240,000; Full time

Benefits offered by this job

Lux Med medical care

Psychological support

Life insurance

My Benefit cafeteria system

Multisport card co-financing

Car/bike park sharing

Job summary

Jacobs Engineering Group in Kraków, Poland, is seeking a Cyber Security Risk Specialist to help assess and mature global cyber postures. The role bridges business, technical teams and cyber leadership to build practical, scalable strategies and operating models.

You will conduct threat and risk assessments across IT/OT, support complex cyber programs, and ensure robust security alignment across environments while collaborating with client security leaders and engineers.

Qualifications

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Telecommunications, Engineering, or related field.
• Proven consulting experience delivering cyber security risk assessments, strategy, or assurance projects for external clients in complex or highly regulated environments.
• Practical experience applying and interpreting core industry frameworks and standards such as NIST CSF, ISO 27001, IEC 62443, NCSC CAF, or NIS/NIS2.
• Strong understanding of cyber security principles, operating models, and program management methodologies (e.g., Agile, Waterfall).
• Relevant cyber security qualifications such as CISSP, CISM, CRISC, SABSA.
• Strong stakeholder management skills with the ability to communicate complex cyber risk topics to senior executives.

Responsibilities

• Support client engagements relating to the development of cyber strategies, technical workflows, and target operating models.
• Conduct comprehensive threat and risk assessments across complex IT and/or OT environments, helping clients make proportionate and cost-effective security decisions.
• Support the design and delivery of complex cyber security programs, ensuring alignment with client objectives, regulatory requirements, and the evolving cyber threat landscape.
• Work closely with clients’ security leaders, architects, and engineering teams to embed secure-by-design principles and translate security frameworks into practical technical requirements.
• Support effective program governance, risk management, and reporting to ensure security initiatives remain on track, mitigate risks, and deliver business value.

Skills

Cyber risk assessments

GRC concepts

Stakeholder management

Security strategy

English proficiency

Education

Bachelor's degree in Cybersecurity

Tools

NIST CSF

ISO 27001

IEC 62443

NCSC CAF

NIS/NIS2

Job description

At Jacobs, we're challenging today to reinvent tomorrow by solving the world's most critical problems for thriving cities, resilient environments, mission-critical outcomes, operational advancement, scientific discovery and cutting-edge manufacturing, turning abstract ideas into realities that transform the world for good.

Your impact

Hybrid work model: Candidates are required to work from our Kraków or Warsaw office at least two days per week. The remaining working days may be performed remotely from home.

We are looking for a Cyber Security Risk Specialist to help support our clients in assessing and maturing their global cyber security postures, whilst helping cyber teams develop their strategies and target operating models. In this role, you will bridge the gap between business, technical teams and cyber leadership (e.g., CISOs,) to build practical, scalable cyber strategies and operating models for our clients. In parallel, you will focus heavily on conducting threat and risk assessments, managing complex cyber programs, and ensuring robust security alignment across IT and OneTrust environments.

Responsibilities:

• Support client engagements relating to the development of cyber strategies, technical workflows, and target operating models
• Conduct comprehensive threat and risk assessments across complex IT and/or OT environments, helping clients make proportionate and cost-effective security decisions.
• Support the design and delivery of complex cyber security programs, ensuring alignment with client objectives, regulatory requirements, and the evolving cyber threat landscape.
• Work closely with clients’ security leaders, architects, and engineering teams to embed secure-by-design principles and translate security frameworks into practical technical requirements.
• Support effective program governance, risk management, and reporting to ensure security initiatives remain on track, mitigate risks, and deliver business value.

Here’s what you’ll need

Qualifications:

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Telecommunications, Engineering, or a related field.
• Proven consulting experience delivering cyber security risk assessments, strategy, or assurance projects for external clients in complex or highly regulated environments.
• Practical experience applying and interpreting core industry frameworks and standards, such as NIST CSF, ISO 27001, IEC 62443, NCSC CAF, or NIS/NIS2.
• Strong understanding of cyber security principles, operating models, and program management methodologies (e.g., Agile, Waterfall).
• Relevant cyber security qualifications (such as CISSP, CISM, CRISC, SABSA).
• Strong stakeholder management skills, with the ability to communicate complex cyber risk topics to senior executives and navigate ambiguous technical challenges.
• Strong foundational knowledge of enterprise Governance, Risk, and Compliance (GRC) principles.
• Strong analytical, problem-solving, and communication skills.
• Professional working proficiency in English.

Nice to have:

• Background working with critical national infrastructure, including energy, water, transport, civil nuclear, or smart infrastructure sectors.
• Experience working with cloud security, OT/IoT security, or digital security architectures.
• Familiarity with related cyber security disciplines such as third-party risk management, data governance & privacy, AI governance, and operational Resilience
• Knowledge in designing and developing custom AI Agents in relation to cyber security
• Relevant program management qualifications (such as PRINCE2, MSP, or AgilePM)

We offer:

• Rewarding employment - full-time employment with a salary that matches your qualifications
• Hybrid work model - enjoy the flexibility of working mostly from home
• Flexible hours - start your day anytime between 7:30 and 10:00 AM
• Comprehensive benefits, including Lux Med medical care, psychological support, life insurance, My Benefit cafeteria system, Multisport card co-financing, and a car/bike park sharing system
• Global projects - engage in exciting international projects
• Inclusive networks - join our diverse employee networks like Women's Network, OneWorld, PRISM, Careers Network, Green Team, SpeakUp, Collectively, and more
• Continuous learning - participate in our Graduate Development Program, Learners’ Community, and self-learning platforms
• Language courses - enhance your skills with courses in English, German, and Polish

We know that if we are inclusive, we’re more connected, and if we are diverse, we’re more creative. We accept people for who they are, regardless of age, disabilities, gender identity, gender expression, marital status, mental health, race, faith or belief, sexual orientation, socioeconomic background, and whether you’re pregnant or on family leave. Find out more about life at Jacobs. As a Disability Confident employer, we will interview all disabled applicants who meet the criteria for a vacancy.

#LI-AD8