Cyber Security Risk Analyst

Euroclear; Kraków; On-site; PLN 254,776 - 382,165; Full time

Job summary

Euroclear, a global leader in financial infrastructure, is seeking an experienced security professional based in Kraków, Poland. The role involves defining security processes, conducting risk assessments, and serving as a security subject-matter expert to protect the company’s information system assets.

Applicants should have a university degree in Computer Science or Engineering, and possess proven IT security expertise with strong communication skills. The position emphasizes collaboration within a multicultural environment, focusing on both security architecture and practical implementations.

Qualifications

• Proven experience in security risk assessments and management reporting.
• Familiarity with industry best practices for security.
• Fluent in English and able to communicate effectively with diverse audiences.

Responsibilities

• Define design and implementation processes to protect information system assets.
• Perform risk assessments and translate security architecture into requirements.
• Act as a subject-matter expert in security domains.

Skills

Security risk assessment

Identity and access management

Application security

Knowledge of security technologies

Effective communication skills

Education

University degree in Computer Science or Engineering

Tools

PowerPoint

Visio

Excel

Word

Job description

Job Description

Euroclear is a global critical financial infrastructure company. Security is at the core of the company’s services, firmly embedded in the company’s management systems and processes. Our Tribe provides impact analysis, security risk assessment, security requirements and design validation for all IT projects in Euroclear, regular security assessments of Euroclear applications and the underlying infrastructure. We also support Euroclear’s compliance activities by reviewing and publishing secure configuration baselines and by organising the Security Exception Review Board. Finally, we provide consultancy for anyone in Euroclear for any IT security related question.

Required Technical and Professional Expertise

• Proven experience in security risk assessments, development of functional security requirements, process design and management reporting.
• Familiarity with industry best practices in key security domains such as identity and access management, PKI, network security and data protection.
• Application security knowledge with a good understanding of software development and testing, OWASP guidelines, code scanning tools, security and compliance automation using a CI/CD pipeline.
• Knowledge of and experience with security technologies including IDAAS (Identity as a Service), identity management platforms, secure access management and federation services, PKI and cryptographic solutions, web application firewalls and endpoint security.
• Knowledge of and experience with security technologies covering domains such as virtualisation, software‑defined networks, cloud IaaS/PaaS/SaaS, network and DMZ infrastructure, VOIP, Wi‑Fi, 802.1x, anti‑malware, system protection, middleware, collaboration and end‑user workspace solutions, storage (SAN, NAS), databases and infrastructure automation services (Infrastructure as Code).
• Preferred professional certifications are CISSP, GIAC, SABSA, ISO 27001 LA/LI. Specific security‑related product certifications are considered an asset.

Your Responsibilities

• Define and advise on the design, implementation and test processes necessary to protect information system assets.
• Perform risk assessments and translate the security architecture and high‑level policies and controls towards security requirements (secure by design) for business and IT projects.
• Contribute to the architectural design and validate it against the security requirements.
• Define security testing requirements and penetration test scope, actively support the testing squads to perform these tests and approve the test reports.
• Define, implement and ensure the proper functioning of security services of our tribe in line with IT security policies.
• Recommend and advise on new or improved security services towards the division management.
• Produce documented security services, technical standards or principles.
• Act as a security subject‑matter expert within a certain domain (for example Mainframe security, PKI and cryptography, network security, platform security, IAM, application security or secure coding), being the point of contact for both business and project squads. Your stakeholders are the business owners/analysts, project leader, risk management, internal/external auditors and, of course, the engineers, developers and architects.

Your Profile

• University degree in Computer Science, Engineering or a similar discipline.
• IT‑security professional with solid experience in the infrastructure security domain or in the IT application security domain.
• Good working knowledge of documentation and presentation applications including PowerPoint, Visio, Excel and Word.
• Experience translating business requirements into technical solutions.
• Effective organisational, planning and time‑management skills.
• Effective research, analytical and critical thinking skills.
• Effective skill exercising initiative and using good judgement to make sound decisions.
• Effective skill maintaining accuracy with diligence and meeting deadlines.
• Effective skill presenting findings, conclusions, alternatives and information clearly and concisely.
• Able to operate within an international, multi‑cultural, networked environment.
• Fluent in English.
• Squad player who communicates in an open, respectful and constructive way with customers and peers, both verbally and in writing.
• Strong communication skills, being able to discuss, defend and translate security topics with both senior business people and deep technical IT experts.
• Ability to handle different projects and cope with pressure and stressful situations.
• Take ownership and ensure that organisational quality standards are met.
• Independent, service‑oriented and organised.