Cybersecurity: Governance, Risk and Compliance Specialist

Innergo; Poznań; On-site; PLN 140,000 - 210,000; Full time

Benefits offered by this job

Private medical care

Life insurance

Sports card

Job summary

Innergo is seeking a Cybersecurity: Governance, Risk and Compliance Specialist to monitor IT access, assess controls, and coordinate global IT risk activities. You will engage with IT and Legal teams to ensure GDPR, SoX, and related regulations are met.

The ideal candidate has a degree in IT or law, strong knowledge of NIST and control frameworks, and at least three years in IT governance, risk or compliance. English fluency is required; ServiceNow and SAP GRC experience is a plus.

Qualifications

• Bachelor’s degree in IT, law, or equivalent experience.
• Knowledge of NIST, governance, risk, privacy, and data security.
• Experience with IT general controls and external audits.
• English proficiency for written and verbal communication.
• 3+ years in IT/Data Governance, IT Risk & Compliance.

Responsibilities

• Monitor user access to IT systems via semiannual reviews and termination validation.
• Validate Segregation of Duties in key applications.
• Coordinate global IT controls assessments with business and regional IT teams.
• Ensure projects comply with company policies and security requirements.
• Assist with vulnerability assessments and SoX audit processes.
• Participate in incident response activities per procedures.
• Develop and support IT Governance, Risk Management, and Compliance processes.
• Assess applications, vendors, and processes from Cybersecurity and Privacy perspectives.
• Work with IT and Legal to ensure GDPR and related regulations compliance.

Skills

Governance

Risk management

Compliance

Information security

English communication

Education

Bachelor’s degree in IT or law

Tools

ServiceNow

SAP GRC

Job description

Cybersecurity: Governance, Risk and Compliance Specialist

JOIN INNERGO AS:

Cybersecurity: Governance, Risk and Compliance Specialist

JOB FUNCTIONS:

• M onitor user access to IT systems by performing the following: Semiannual access reviews, Termination validation procedures, IT Privilege access reviews
• Validate that access to critical functions within key applications is appropriately segregated (Segregation of Duties – SOD)
• Establish effective communication processes with the business and regional IT teams to coordinate the global assessment of IT controls
• Integrally engage in projects making sure that they comply with O-I policies and security requirements
• Assist with independent vulnerability assessment and SoX audit processes
• Follow documented procedures and retain necessary audit documentation
• Participate in the incident response activities in accordance with established procedures
• Develop and support IT Governance processes
• Develop and support IT Risk Management processes
• Develop and support IT Compliance processes
• Assessing applications, vendors, and processes from a Cybersecurity and Privacy perspective
• Work with the IT and Legal teams to ensure compliance with regulations (SoX, GDPR, DOL, etc).

POSITION REQUIREMENTS:

• Bachelor’s degree in information technology or legal or equivalent years of experience
• Understanding of security frameworks (NIST), and regulatory requirements – governance, risk management, privacy, and data security
• Understanding of security protocols and standards
• Solid knowledge of information security principles, practices
• Minimum 3 years of experience working in Information Technology/IT and Data Governance, IT Risk Management, IT Compliance
• Minimum 3 years of experience working with IT general computer control evaluations, remediation, and with external auditors
• Intermediate knowledge related to privacy assessment (GDPR)
• Understanding of the industry’s control frameworks and leading practices
• Experience in evaluating system security requirements
• Knowledge of system functions, security policies, technical security safeguards, and operational security measures
• Knowledge of industry-leading practices, security frameworks, policies, and standards
• Intermediate operational knowledge of ServiceNow
• Intermediate operational knowledge of SAP GRC
• Ability to determine priorities, makes discretionary decisions and determines when to notify management
• Ability to work well with people from many different disciplines with varying degrees of technical experience
• Experience in communicating and presenting to a management-level audience
• Organized, responsive, and highly thorough problem solver
• Detail oriented
• Demonstrated analytical capabilities
• Self-starter and strong collaboration skills
• Experience in effective communication with customers, employees, and management
• Have high integrity and be able to maintain the confidentiality of work performed
• Must be able to communicate in English – both written and verbal.

ADDITIONAL QUALIFICATIONS:

• ISACA Certified Information Security Manager (CISM)
• ISACA Certified in Risk & Information System Controls (CRISC)
• ISACA Certified in the Governance of Enterprise IT (CGEIT)
• (ISC)2 Certified Information Systems Security Professional (CISSP).

WE OFFER:

• Necessary for work tools
• Co-financing for private medical care, life insurance, sports card