Cybersecurity Risk Manager | Warsaw

C&D Talent Advisory - Academy; Rzeszów; On-site; PLN 258,000 - 388,000; Full time

Job summary

TechTree is seeking an experienced Cybersecurity Risk Manager for a major EU agency project in Warsaw. The role is a senior, high-impact position with critical asset protection responsibilities and on-site work.

You'll lead the risk-management lifecycle end to end, drive strategy, and report to executives. A Master's degree and 4+ certifications underpin your expertise in a regulated environment.

Qualifications

• 9+ years of overall IT experience.
• 6+ years in cybersecurity risk management.
• Master's degree or higher.
• C1-level English.
• 4+ recognized cybersecurity or risk certifications such as CISA, CISM, CRISC, CISSP.

Responsibilities

• Own the cybersecurity risk-management lifecycle end to end from asset identification to executive reporting.
• Develop and maintain the organisation's cybersecurity risk-management strategy.
• Manage asset inventories and risk assessments.
• Identify cybersecurity threats and vulnerabilities.
• Assess threat landscapes and attacker capabilities.
• Recommend risk-treatment strategies, controls and mitigation measures; monitor control effectiveness and residual risk.
• Produce Business Impact Assessments and risk-management documentation.
• Communicate risk clearly to executives and senior stakeholders.

Skills

IT experience

Cybersecurity risk management

Executive communication

English proficiency

Education

Master's degree or higher

4+ cybersecurity or risk certifications

Tools

ServiceNow GRC

Job description

Cybersecurity Risk Manager | Warsaw

TechTree's client is hiring an experienced Cybersecurity Risk Manager to join a large-scale IT security programme supporting a major EU agency in Warsaw.

This is a senior, high-impact opportunity for someone with deep cybersecurity risk experience who wants to operate in a highly regulated, mission-critical environment protecting critical assets and infrastructure.

• Location: Warsaw, Poland
• Work model: 100% on-site
• Employment: Contract
• Initial term: 12 months, with potential extensions up to 48 months
• Estimated compensation: €60,000–€90,000
• Level: Mid-Senior

What You'll Do

You’ll own the cybersecurity risk-management lifecycle end to end, from asset identification and threat assessment through to control design, monitoring and executive reporting.

Key responsibilities include:

• Develop and maintain the organisation's cybersecurity risk-management strategy
• Manage asset inventories and risk assessments
• Identify cybersecurity threats and vulnerabilities
• Assess threat landscapes and attacker capabilities
• Recommend risk-treatment strategies, controls and mitigation measuresMonitor control effectiveness and residual risk
• Produce Business Impact Assessments and risk-management documentation
• Communicate risk clearly to executives and senior stakeholders
• Help build an organisation-wide risk-aware security culture

What We're Looking For

• 9+ years of overall IT experience
• 6+ years in cybersecurity risk management
• Master's degree or higher
• C1-level English
• At least 4 recognised cybersecurity or risk certifications, such as CISA, CISM, CRISC, CISSP, CGRC, CSSLP, CCSP, CISSP-ISSMP, ISO 27001 Lead Implementer, ISO 27001 Lead Auditor or ISO 27005 Risk Manager
• Strong experience implementing risk-management frameworks and leading risk assessments
• Ability to present technical risk in clear, executive-level terms
• Willingness to work 100% on-site in Warsaw
• Eligibility and willingness to undergo CONFIDENTIEL UE / EU CONFIDENTIAL security clearance

Strong advantages

• ServiceNow GRC
• Business Impact Assessments
• Personal data protection documentation
• Threat modelling
• Zero Trust Architecture
• Secure SDLC
• DevOps security
• Directory Services defence controls