Cybersecurity Risk Manager | Warsaw

Cross Border Talents; Lublin; On-site; PLN 258,000 - 388,000; Full time

Job summary

TechTree is recruiting for a Cybersecurity Risk Manager in Warsaw for a major EU agency. You will own the cybersecurity risk-management lifecycle from asset identification to executive reporting, and lead the risk-management strategy in a highly regulated environment.

The role requires 9+ years IT experience, 6+ years in cybersecurity risk management, a Master's degree, C1 English, and 4+ recognised certifications. 100% on-site in Warsaw with security clearance potential.

Qualifications

• 9+ years of overall IT experience.
• 6+ years in cybersecurity risk management.
• Master's degree or higher.
• C1-level English.
• At least 4 recognised cybersecurity or risk certifications (e.g., CISA, CISM, CRISC, CISSP, CGRC, CSSLP, CCSP, CISSP-ISSMP, ISO 27001 Lead Implementer/Auditor, ISO 27005 Risk Manager).
• Strong experience implementing risk-management frameworks and leading risk assessments.
• Ability to present technical risk in clear, executive-level terms.
• Willingness to work 100% on-site in Warsaw.
• Eligibility and willingness to undergo CONFIDENTIEL UE / EU CONFIDENTIAL security clearance.

Responsibilities

• Own the cybersecurity risk-management lifecycle end to end, from asset identification and threat assessment to control design, monitoring and executive reporting.
• Develop and maintain the organisation's cybersecurity risk-management strategy.
• Manage asset inventories and risk assessments.
• Identify cybersecurity threats and vulnerabilities.
• Assess threat landscapes and attacker capabilities.
• Recommend risk-treatment strategies, controls and mitigation measures.
• Monitor control effectiveness and residual risk.
• Produce Business Impact Assessments and risk-management documentation.
• Communicate risk clearly to executives and senior stakeholders.
• Help build an organisation-wide risk-aware security culture.

Skills

Cybersecurity risk management

Executive communication

Risk assessment leadership

C1 English

Education

Master's degree or higher

Tools

ServiceNow GRC

Threat modelling

Job description

Hiring via TechTree

This is a role that TechTree is recruiting for on behalf of one of its clients.

TechTree is an AI-driven recruitment platform working with high-growth companies.

When you apply, TechTree's AI Agent matches you not just to this role, but to other relevant opportunities across its network, so one application can unlock multiple roles.

Cybersecurity Risk Manager | Warsaw

TechTree's client is hiring an experienced Cybersecurity Risk Manager to join a large-scale IT security programme supporting a major EU agency in Warsaw.

This is a senior, high-impact opportunity for someone with deep cybersecurity risk experience who wants to operate in a highly regulated, mission-critical environment protecting critical assets and infrastructure.

• Location: Warsaw, Poland
• Work model: 100% on-site
• Employment: Contract
• Initial term: 12 months, with potential extensions up to 48 months
• Estimated compensation: €60,000–€90,000
• Level: Mid-Senior

What you'll do

You’ll own the cybersecurity risk-management lifecycle end to end, from asset identification and threat assessment through to control design, monitoring and executive reporting.

Key responsibilities include:

• Develop and maintain the organisation's cybersecurity risk-management strategy
• Manage asset inventories and risk assessments
• Identify cybersecurity threats and vulnerabilities
• Assess threat landscapes and attacker capabilities
• Recommend risk-treatment strategies, controls and mitigation measures
• Monitor control effectiveness and residual risk
• Produce Business Impact Assessments and risk-management documentation
• Communicate risk clearly to executives and senior stakeholders
• Help build an organisation-wide risk-aware security culture

What we're looking for

• 9+ years of overall IT experience
• 6+ years in cybersecurity risk management
• Master's degree or higher
• C1-level English
• At least 4 recognised cybersecurity or risk certifications, such as CISA, CISM, CRISC, CISSP, CGRC, CSSLP, CCSP, CISSP-ISSMP, ISO 27001 Lead Implementer, ISO 27001 Lead Auditor or ISO 27005 Risk Manager
• Strong experience implementing risk-management frameworks and leading risk assessments
• Ability to present technical risk in clear, executive-level terms
• Willingness to work 100% on-site in Warsaw
• Eligibility and willingness to undergo CONFIDENTIEL UE / EU CONFIDENTIAL security clearance

Strong advantages

Experience with:

• ServiceNow GRC
• Business Impact Assessments
• Personal data protection documentation
• Threat modelling
• Zero Trust Architecture
• Secure SDLC
• DevOps security
• Directory Services defence controls