Cybersecurity Risk & Compliance Manager - Hybrid/Remote

EY; Katowice; Hybrid; PLN 260,000 - 380,000; Full time

Job summary

EY is seeking a Cybersecurity Risk and Compliance Manager in Katowice (Poland) with a focus on aligning cybersecurity and resilience programs with business growth and operations. The role combines hands-on delivery with governance and risk management across ISMS, TPRM, and regulatory requirements.

Location: Katowice, Poland — 2 days in office / 3 days remote. You will identify deficiencies, provide actionable recommendations, and contribute to project delivery while coordinating with the

Qualifications

• Minimum 8 years of experience in cybersecurity risk management.
• Experience with governance, IT infrastructure security, risk management, and cyber program assessments.
• Familiarity with ISO27001/NIST or ISMS governance systems.

Responsibilities

• Evaluate clients' cybersecurity and risk management programs.
• Develop and implement risk management strategies.
• Conduct compliance and control evaluations against ISO 27001/NIST.
• Perform ISMS and ITGC reviews.
• Manage Third Party Risk Management (TPRM).
• Contribute to hands-on project delivery and governance frameworks.

Skills

Cybersecurity risk

ISMS

TPRM

Governance

Project management

Stakeholder management

English proficiency

Job description

EY is seeking a Cybersecurity Risk and Compliance Manager in Katowice (Poland) with a focus on aligning cybersecurity and resilience programs with business growth and operations. The role combines hands-on delivery with governance and risk management across ISMS, TPRM, and regulatory requirements.

Location: Katowice, Poland — 2 days in office / 3 days remote. You will identify deficiencies, provide actionable recommendations, and contribute to project delivery while coordinating with the