Cybersecurity Specialist

ITConnect; Polska; Híbrido; PLN 180.000 - 280.000; Jornada completa

Descripción de la vacante

ITConnect is seeking a cybersecurity professional for a banking-focused assignment to assess security findings, drive remediation governance, and prioritise vulnerabilities using risk-based methods. You will lead remediation initiatives, guide stakeholders, and collaborate across teams to ensure timely execution, with automation and AI awareness shaping governance.

Fluent English required; 3+ years hands-on experience in security findings and remediation; strong analytical and presentation

Formación

• 3+ years hands-on security remediation experience.
• Strong understanding of remediation governance and risk-based prioritization.
• Experience presenting to stakeholders and driving cross-functional initiatives.
• Familiarity with OWASP, DevOps concepts, and security findings.
• Excellent analytical and problem-solving abilities.

Responsabilidades

• Lead identification of remediation gaps and drive strategic resolution initiatives.
• Provide guidance to stakeholders on remediation strategies aligning with security best practices.
• Analyse complex scan results to define actionable steps reducing risk exposure.
• Collaborate with remediation owners to ensure timely execution.
• Ensure security findings are clearly understood and remediation progresses at appropriate pace.
• Demonstrate autonomy in task execution with proactive governance.
• Contribute to risk scoring design for near real-time prioritization.
• Mentor team members and share knowledge across security function.

Conocimientos

Remediation strategy

Stakeholder communication

Risk scoring

Cross-functional collaboration

Analytics & modelling

Herramientas

Python

Apache Airflow

Power Automate

Descripción del empleo

Cybersecurity assignment in the banking industry focused on security findings assessment, remediation governance, and risk-based vulnerability prioritisation.

• Lead the identification of remediation gaps and drive strategic resolution initiatives across the organisation
• Provide expert guidance to stakeholders on remediation strategies, ensuring alignment with security best practices and regulatory expectations
• Analyse complex scanning results to define actionable steps that reduce risk exposure for the bank
• Collaborate cross-functionally with accountable and responsible remediation owners to ensure timely and effective execution
• Ensure security findings are clearly understood and that remediation efforts are progressing at an appropriate pace
• Demonstrate autonomy and ownership in task execution, maintaining a proactive governance approach and influencing remediation outcomes
• Contribute in design of risk scoring to enable near real-time, risk-based prioritization and faster remediation of critical vulnerabilities
• Deep understanding of security domains, especially security findings assessment and remediation areas, supported by at least 3+ years of hands-on experience
• Deep understanding of modern AI threats and their impact on security posture
• Expert-level knowledge of vulnerability scoring frameworks, security risk assessment methodologies, and governance processes used to determine severity, prioritization, and remediation timelines for security findings
• Governance knowledge, proven by experience in at least one of the security findings fields: External Attack Surface Management (EASM) findings, Threat Modelling findings, API-related findings
• Knowledge and experience within the fields of problem management, Secure DevOps, DORA, OWASP
• Advanced trouble-shooting and conceptual skills with the ability to come up with solutions to uncommon problems related to remediation actions
• Ability to interpret and communicate results using exploratory data analysis and statistical modelling techniques
• Good understanding of risk based approach and risk management
• Experience in cross-organizational collaboration/negotiation
• Prepare and deliver presentations to stakeholders, clearly communicating remediation progress, risks, and strategic recommendations
• Fluent business and technical English is a must (both written and spoken)
• Demonstrated experience in automation, preferably using Python, Apache Airflow, and/or Power Automate
• Practical application of AI technologies in governance processes and automation workflows
• Ability to mentor team members and contribute to knowledge sharing across the security function