Cybersecurity/IT GRC Specialist

Seargin; Województwo pomorskie; On-site; PLN 120,000 - 190,000; Full time

Job summary

Seargin, an international consulting company revolutionizing the technology industry across 50 countries, seeks a cybersecurity governance professional. The role ensures compliance with information security regulations, oversees SOC/MDR partnerships, and supports ISMS development, while collaborating with clients and internal teams to strengthen security controls.

You will evaluate security controls, participate in audits, manage risk, and contribute to the cybersecurity service portfolio with a

Qualifications

• 2–3 years of cybersecurity, information security, IT risk management, security audits, or related areas.
• Experience assessing security control compliance or managing risk.
• Experience working with IT departments and technology service providers.
• Practical experience with SIEM or EDR outputs, alerts, or incident handling.

Responsibilities

• Governance and Oversight: monitor compliance with information security and cybersecurity requirements.
• NIS2, ISO 27001, and regulatory requirements: support ISMS maintenance and regulatory alignment.
• Collaboration with Internal IT: review security configurations in Microsoft 365 and Entra ID environments without changes.
• SOC/MDR Provider Oversight: participate in provider selection, define access matrices, and monitor SLA compliance.
• Risk and Incident Management: participate in cybersecurity risk assessments and post-incident remediation actions.
• Client Support: conduct security reviews, prepare reports with recommendations for clients.

Skills

Cybersecurity

Information security

IT risk management

Security audits

Compliance

Tools

SIEM

EDR

Microsoft 365

Entra ID

Job description

Seargin is an international consulting company that is revolutionizing the technology industry across 50 countries!

We deliver real business value by combining strategic IT consulting with hands-on implementation, bridging the gap between vision and execution.

Our expertise spans ERP transformation programs, AI-powered workflow optimization, enterprise data management, and cybersecurity. With a team of 1,000+ senior consultants across Europe, the United States and Asia, Seargin supports global organizations in areas such as:

• ERP transformation (such as SAP)
• AI-powered workflow optimization & AI Workforce implementation
• Data governance, MDM, and unified data platforms
• Cybersecurity
• Mergers & acquisitions: end-to-end carve-outs and integrations
• Recovery of stalled or failed initiatives

Our clients - including Fortune 500 leaders - trust us because we don’t just advise. We build, lead, and deliver - with speed, precision, and full accountability.

Join us and shape the future with Seargin - where innovation meets execution.

Job Purpose

To ensure effective oversight of information security and cybersecurity by monitoring compliance with business, regulatory, and organizational requirements, overseeing security service providers—particularly the SOC/MDR partner—and supporting the development of cybersecurity services delivered to clients.

The role serves as the second line of defense for cybersecurity and information security. It is responsible for governance, risk management, compliance assessments, and monitoring the implementation of security requirements by operational functions and service providers. It acts as a bridge between business, regulatory, and technical requirements.

Key Responsibilities

Governance and Oversight

• Monitor the organization's compliance with information security and cybersecurity requirements.
• Define security requirements for processes, projects, and services.
• Conduct reviews of security control compliance.
• Identify gaps and areas requiring improvement.
• Monitor the implementation of remediation actions by business and IT owners.

NIS2, ISO 27001, and Regulatory Requirements

• Contribute to the maintenance and development of the Information Security Management System (ISMS).
• Support the organization in meeting the requirements of NIS2, national regulations, ISO 27001, DORA, and other cybersecurity-related regulations.
• Prepare compliance assessments and recommend appropriate actions.
• Participate in internal and external audits.

Collaboration with Internal IT

• Assess the adequacy of implemented security controls.
• Review security configurations in Microsoft 365 and Entra ID environments using available assessment tools, without making configuration changes.
• Analyze technical reports provided by IT teams and service providers.
• Oversee vulnerability management, including prioritization and tracking remediation deadlines.
• Participate in technology projects in an oversight capacity.

SOC/MDR Provider Oversight

• Participate in provider selection by defining requirements and evaluating proposals and pilot results.
• Contribute to defining the provider's access and permissions matrix and escalation procedures.
• Monitor SLA compliance and service quality.
• Assess detection coverage against the organization's environment and recommend improvements.
• Review incident reports and periodic service provider reports.
• Conduct operational reviews with the provider and organize escalation-path testing.
• Support client onboarding to the SOC service in collaboration with the provider.

Risk and Incident Management

• Participate in cybersecurity risk assessments.
• Assess the impact of incidents to support their classification and reporting by the CISO.
• Monitor the implementation of post-incident remediation actions.
• Participate in root cause analysis and recommend improvements.

Client Support

• Participate in client security reviews.
• Conduct gap assessments against NIS2 and ISO 27001 requirements.
• Prepare reports and recommendations, including technical recommendations for implementation.
• Verify the implementation of recommendations at client organizations.
• Collaborate on the development of the cybersecurity service portfolio.

Education and Awareness

• Support cybersecurity awareness programs.
• Deliver or co-develop security training.
• Promote security best practices.

Mandatory Requirements

Experience

• At least 2–3 years of experience in cybersecurity, information security, IT risk management, security audits, compliance, or related areas.
• Experience assessing security control compliance or managing risk.
• Experience working with IT departments and technology service providers.
• Practical experience working with SIEM or EDR outputs, such as analyzing alerts and SOC reports, participating in incident handling, or collaborating with an external SOC from the client's side.

Knowledge

• Practical knowledge of ISO 27001.
• Good understanding of cybersecurity risk management principles.
• Knowledge of NIS2 and familiarity with DORA, the Cyber Resilience Act (CRA), and the AI Act in the context of security requirements.
• Knowledge of security standards and best practices, such as NIST CSF or CIS Controls.
• Good understanding of Microsoft 365 and Entra ID security mechanisms, sufficient to assess their configuration.

The candidate should understand:

• Identity and access management, including MFA and Conditional Access in Entra ID.
• Microsoft 365 security controls.
• Vulnerability management.
• EDR, XDR, and SIEM solutions, as well as how SOC/MDR services operate.
• Backup and data recovery.

Language

• English proficiency at B2 level or higher.

Nice to Have

• Experience implementing NIS2 requirements or assessing compliance with them.
• Experience with ISO 27001 projects.
• Experience selecting, evaluating, or overseeing security service providers (SOC, MDR, MSSP).
• Knowledge of MITRE ATT&CK for assessing detection coverage.
• Experience in IT services, outsourcing, or consulting.
• Experience preparing reports for clients and executive management.
• Relevant certifications, such as ISO 27001 Lead Auditor or Lead Implementer, CISA, Microsoft SC-200, or SC-900.
• Ability to combine business, regulatory, and technical perspectives.
• Independence and the ability to work autonomously.
• Effective communication with both technical and non-technical stakeholders.
• Assertiveness when working with teams and service providers whose performance is being assessed.
• High standards of documentation and reporting.
• Analytical and risk-based thinking.
• Discretion and confidentiality.

This role does not involve working as a SOC analyst or administering IT systems. It does, however, require the ability to critically assess the performance of service providers and operational teams from a security, compliance, and risk perspective.

Feel free to reach us on seargin.com or [e-mail]