Cybersecurity Risk & Compliance Lead

Ernst & Young Advisory Services Sdn Bhd; Katowice; On-site; PLN 210,000 - 270,000; Full time

Job summary

EY GDS Poland is seeking a Cybersecurity Risk and Compliance Manager to lead client engagements, evaluating and strengthening cybersecurity and risk management programs. You will design and implement risk strategies, conduct audits of ISMS and IT controls, and guide governance, resilience, and third-party risk initiatives.

Strong English and 8+ years of experience are essential. The role emphasizes hands-on delivery, collaboration with engagement teams, and building governance frameworks aligned

Qualifications

• Minimum 8 years of experience in cybersecurity risk management.
• Experience in risk assessments, threat modelling and mitigation planning.
• Familiarity with ISO/IEC 27001, NIST and ISMS governance.
• Strong stakeholder communication and project leadership skills.

Responsibilities

• Evaluate the effectiveness of clients' cybersecurity and risk management programs.
• Develop and implement risk management strategies.
• Conduct compliance and control evaluations per ISO27001 and NIST.
• Perform ISMS and IT general controls reviews.
• Manage Third Party Risk Management (TPRM) processes.
• Provide domain knowledge in governance, security and risk management.
• Lead hands-on project delivery while coordinating team efforts.
• Set up governance frameworks for cybersecurity services and KPIs.

Skills

Cybersecurity risk mgmt

Threat modelling

Governance

Stakeholder management

Project leadership

Regulatory compliance

Education

Bachelor's degree in CS/IT

Job description

EY GDS Poland is seeking a Cybersecurity Risk and Compliance Manager to lead client engagements, evaluating and strengthening cybersecurity and risk management programs. You will design and implement risk strategies, conduct audits of ISMS and IT controls, and guide governance, resilience, and third-party risk initiatives.

Strong English and 8+ years of experience are essential. The role emphasizes hands-on delivery, collaboration with engagement teams, and building governance frameworks aligned