Cyber Security Governance Lead Remote/Hybrid

KK Group; Szczecin; Hybrid; PLN 180,000 - 300,000; Full time

Job summary

KK Group is seeking a Cyber Security Manager to drive governance, risk management and incident response while aligning with NIS2, ISO 27001, and internal policies. The role supports hybrid work from Szczecin or remote Poland, with occasional travel to the Szczecin facility.

You will lead policy development, risk reporting, training programs, supplier risk assessments, and security reviews of new initiatives. A strong security leadership mindset is essential.

Qualifications

• 5–8+ years in cybersecurity, IT security governance, risk management or compliance.
• 2–3 years in a lead/manager role related to governance, risk, compliance or security operations.
• Practical knowledge of NIS2, ISO 27001 ISMS, frameworks and risk methodologies.
• Experience with risk assessments, risk registers, control validation and remediation tracking.
• Strong incident response, escalation, post-incident reviews and regulatory reporting.
• Solid understanding of IT infrastructure, networks, IAM, cloud security, backups and monitoring.

Responsibilities

• Governance: develop and oversee information security policies aligned with laws and internal rules.
• Reporting: provide cybersecurity status, risk and incident summaries to senior leadership.
• Training: plan and coordinate mandatory cybersecurity awareness programs.
• Management training: organize dedicated security training for leadership teams.
• Risk: conduct periodic risk assessments across assets, systems and processes.
• Vendor: assess supplier cybersecurity risks and track remediation actions.
• Security reviews: evaluate new initiatives for Security by Design and Default.
• Incident & BC/DR: oversee incident detection, response, and post-incident reviews.
• Audits: support internal/external audits related to cybersecurity and risk.

Skills

NIS2 compliance

ISO 27001 ISMS

Risk assessment

Incident response

Governance & reporting

Vendor risk management

Stakeholder communication

Job description

KK Group is seeking a Cyber Security Manager to drive governance, risk management and incident response while aligning with NIS2, ISO 27001, and internal policies. The role supports hybrid work from Szczecin or remote Poland, with occasional travel to the Szczecin facility.

You will lead policy development, risk reporting, training programs, supplier risk assessments, and security reviews of new initiatives. A strong security leadership mindset is essential.