Cyber Security Governance Lead (Remote/Hybrid, Poland)

KK Group; Szczecin; Hybrid; PLN 180.000 - 240.000; Vollzeit

Zusammenfassung

KK Group is seeking an experienced Cyber Security Manager to lead governance, risk, compliance, and incident response across the business. You will develop and maintain information security policies, coordinate risk assessments, and report cybersecurity posture to senior leadership.

The role supports hybrid work from Szczecin or remote from anywhere in Poland, with occasional travel to the Szczecin facility.

Qualifikationen

• 5-8+ years of experience in cybersecurity, IT security governance, risk management, compliance, or related areas.
• At least 2-3 years of experience in a lead, manager, or ownership role related to cybersecurity governance, risk, compliance, or security operations.
• Practical knowledge of NIS2, ISO 27001, Information Security Management Systems (ISMS), cybersecurity frameworks, and risk management methodologies.
• Experience conducting cybersecurity risk assessments, maintaining risk registers, validating controls, supporting audits, and tracking remediation activities.
• Strong understanding of incident response, escalation processes, post-incident reviews, and regulatory reporting obligations.
• Solid knowledge of IT infrastructure, networks, identity and access management, endpoint security, cloud security, backup and recovery, and security monitoring tools.
• Experience assessing supplier cybersecurity risks and supporting vendor risk management processes.
• Ability to translate technical cybersecurity risks into business impact and communicate effectively with both technical and non-technical stakeholders.
• Strong stakeholder management, communication, and relationship-building skills.
• A structured, proactive, and solutions-oriented mindset.

Aufgaben

• Develop, maintain, and oversee Information Security Policies aligned with regulatory and internal requirements.
• Provide regular cybersecurity status updates, risk reports, and incident summaries to senior leadership and the Management Board.
• Plan and coordinate mandatory cybersecurity awareness training for employees.
• Organize dedicated cybersecurity training sessions for management teams.
• Conduct periodic risk assessments covering key assets, systems, and business processes.
• Evaluate cybersecurity maturity and compliance of suppliers and service providers.
• Perform security reviews of new business initiatives and IT projects, ensuring Security by Design and Security by Default principles.
• Oversee security incident detection, triage, response, and post-incident reviews.
• Ensure timely reporting of significant incidents in line with regulatory requirements and reporting timelines.
• Supervise Business Continuity Planning (BCP) and Disaster Recovery (DR), including regular verification of backup effectiveness.
• Plan, coordinate, and track security testing activities, including penetration tests and vulnerability assessments.
• Verify the effectiveness of technical and organizational security controls implemented across the company.
• Support internal and external audits related to cybersecurity, compliance, and risk management.

Jobbeschreibung

KK Group is seeking an experienced Cyber Security Manager to lead governance, risk, compliance, and incident response across the business. You will develop and maintain information security policies, coordinate risk assessments, and report cybersecurity posture to senior leadership.

The role supports hybrid work from Szczecin or remote from anywhere in Poland, with occasional travel to the Szczecin facility.