Cybersecurity Specialist

ITConnect; Polska; Hybrid; PLN 120,000 - 180,000; Full time

Benefits offered by this job

Hybrid work model

Hybrid setup: 3 days in the office per

Job summary

ITConnect Sp. z o.o. is seeking a hands-on Security Findings Assessment and Remediation Governance specialist.

You will lead remediation gaps, guide stakeholders on strategies, and translate complex scanning results into actionable steps to reduce bank risk. Collaboration with owners and clear progress reporting are essential. Applicants should have 3+ years in remediation, strong knowledge of risk assessment, and experience with AI threat awareness.

Qualifications

• 3+ years hands-on experience in security findings assessment and remediation governance.
• Experience with vulnerability scoring frameworks and risk assessment methodologies.
• Ability to communicate remediation progress and risks to stakeholders.

Responsibilities

• Lead remediation gaps identification and drive strategic resolution initiatives.
• Provide expert guidance to stakeholders on remediation strategies and regulatory expectations.
• Analyse complex scanning results to define actionable steps reducing risk exposure.
• Collaborate with remediation owners to ensure timely execution and governance.
• Prepare and deliver presentations on remediation progress and strategic recommendations.

Skills

Remediation governance

Risk-based prioritization

Stakeholder guidance

Regulatory alignment

Data analysis

Automation

Tools

Python

Apache Airflow

Power Automate

Job description

Assignment focused on security findings assessment, risk-based prioritization and remediation governance for a bank.

• Lead the identification of remediation gaps and drive strategic resolution initiatives across the organisation
• Provide expert guidance to stakeholders on remediation strategies, ensuring alignment with security best practices and regulatory expectations
• Analyse complex scanning results to define actionable steps that reduce risk exposure for the bank
• Collaborate cross-functionally with accountable and responsible remediation owners to ensure timely and effective execution
• Ensure security findings are clearly understood and that remediation efforts are progressing at an appropriate pace
• Demonstrate autonomy and ownership in task execution, maintaining a proactive governance approach and influencing remediation outcomes
• Contribute in design of risk scoring to enable near real-time, risk-based prioritization and faster remediation of critical vulnerabilities
• Deep understanding of security domains, especially security findings assessment and remediation areas, supported by at least 3+ years of hands-on experience
• Deep understanding of modern AI threats and their impact on security posture
• Expert-level knowledge of vulnerability scoring frameworks, security risk assessment methodologies, and governance processes used to determine severity, prioritization, and remediation timelines for security findings.
• Governance knowledge, proven by experience in at least one of the security findings fields:
• External Attack Surface Management (EASM) findings
• API-related findings
• Knowledge and experience within the fields of problem management, Secure DevOps, DORA, OWASP
• Advanced trouble-shooting and conceptual skills with the ability to come up with solutions to uncommon problems related to remediation actions
• Ability to interpret and communicate results using exploratory data analysis and statistical modelling techniques
• Good understanding of risk based approach and risk management
• Experience in cross-organizational collaboration/negotiation
• Prepare and deliver presentations to stakeholders, clearly communicating remediation progress, risks, and strategic recommendations
• Fluent business and technical English is a must (both written and spoken)
• Demonstrated experience in automation, preferably using Python, Apache Airflow, and/or Power Automate
• Practical application of AI technologies in governance processes and automation workflows
• Ability to mentor team members and contribute to knowledge sharing across the security function

To oferujemy:

• Hybrid setup: 3 days in the office per week.