Cybersecurity Manager | EU Institutions Project

SEIDOR; Warszawa; On-site; PLN 180,000 - 240,000; Full time

Job summary

SEIDOR is seeking a Cybersecurity Risk Manager (CSRM) to lead risk management activities in Warsaw. You will develop strategies, manage asset inventories, assess threats, and propose controls to keep cyber risk at acceptable levels.

You will collaborate with executives and asset owners to drive risk-informed decisions and reinforce a risk-aware culture. The role requires extensive experience in risk management, DevSecOps considerations, and implementation of Zero Trust and SDLC security

Qualifications

• Master's degree or higher in a relevant field.
• Minimum 9 years of IT experience with 6+ years in a similar role.
• Advanced knowledge of cybersecurity risk management and frameworks.
• At least 4 certifications from the listed security domains.

Responsibilities

• Develop and maintain the organisation's cybersecurity risk management strategy.
• Manage assets inventory and support risk categorisation.
• Identify and assess cybersecurity threats and vulnerabilities affecting ICT systems.
• Analyse threat landscape and attacker profiles and impact.
• Perform risk assessments and propose risk treatment options and controls.
• Monitor effectiveness of cybersecurity controls and evolving risk levels.
• Ensure risks remain at an acceptable level for assets.
• Communicate the full cybersecurity risk management cycle to stakeholders.
• Enable stakeholders to make risk-informed decisions.
• Help employees understand and follow cybersecurity controls.

Skills

Cybersecurity risk management

Threat modelling

Risk assessment

GRC

Information security

Asset management

Stakeholder communication

Education

Master's degree

Tools

ServiceNow

Threat modelling tools

Job description

About Seidor

SEIDOR helps organizations transform and stay competitive through technology and innovation, always putting people first. With over 8,000 professionals in 45 countries, we are a diverse and inclusive global team committed to talent, equal opportunities, and sustainable growth.

#HumanizingTechnology

About Seidor

SEIDOR helps organizations transform and stay competitive through technology and innovation, always putting people first. With over 8,000 professionals in 45 countries, we are a diverse and inclusive global team committed to talent, equal opportunities, and sustainable growth.

Will you join us in humanizing technology?

We want you to be a part of our team as a Cybersecurity Risk Manager (CSRM), providing services on-site in Warsaw

WHAT WILL YOU DO IN YOUR DAY-TO-DAY?

• Develop and maintain the organisation's cybersecurity risk management strategy.
• Manage an inventory of the organisation's assets and support their risk categorisation.
• Identify and assess cybersecurity-related threats and vulnerabilities affecting ICT systems.
• Analyse the threat landscape, including attackers' profiles and the potential impact of attacks.
• Perform cybersecurity risk assessments and propose appropriate risk treatment options, security controls, mitigation measures and avoidance strategies.
• Monitor the effectiveness of cybersecurity controls and evolving risk levels.
• Ensure cybersecurity risks remain at an acceptable level for the organisation's assets.
• Develop, maintain, report and communicate the complete cybersecurity risk management cycle.
• Enable asset owners, executives and other stakeholders to make risk-informed decisions.
• Help employees understand, adopt and follow cybersecurity controls, supporting a risk-aware environment.

Requirements

• Minimum education level: Master's Degree.
• Required certifications:

At least 4 certifications from the following list: CISA, CISM, CRISC, CISSP, CGRC, CSSLP, CCSP, CISSP-ISSMP, GSNA, GCCC, GIAC Certified ISO-27000 Specialist, ISO 27001 Lead Implementer, ISO 27001 Lead Auditor, ISO 27005 Risk Manager.

• Minimum 9 years of relevant IT professional experience.
• Minimum 6 years of experience in a similar position.
• Advanced knowledge of cybersecurity risk management frameworks, standards, methodologies, tools, guidelines and best practices.
• Experience performing risk assessments and analysis to identify threats, categorise assets and rate system vulnerabilities.
• Knowledge of cyber threats, threat taxonomies and vulnerability repositories.
• Knowledge of risk-sharing options and current technical and organisational controls used to mitigate cybersecurity risks.
• Knowledge of monitoring, implementing and testing the effectiveness of cybersecurity controls.
• Ability to analyse and consolidate organisational quality and risk-management practices.
• Ability to propose and manage risk-sharing options.

Specific Experience Required

• Experience in Business Impact Assessments.
• Knowledge of risk assessment implementation in GRC ServiceNow.
• Experience preparing personal data protection documentation.
• Experience with graphical and programmatic threat-modelling tools.
• Experience in threat modelling for DevOps.
• Experience designing Zero Trust Architecture.
• Experience securing the Software Development Lifecycle (SDLC).
• Experience designing controls for defending Directory Services.