GRC & Information Security Specialist - ISO27001/NIST CSF

DS Smith; Kraków; On-site; PLN 120,000 - 180,000; Full time

Job summary

DS Smith is seeking an I&T GRC professional to support information security controls, risk management, and awareness initiatives across the organization. The role involves documentation for ISO27001 and EU NIS2, and collaboration with IT and business stakeholders to improve security posture.

You will engage with customers and suppliers on assurance requirements, and may travel up to 20% for on-site engagements. Fluency in English is required.

Qualifications

• Good working knowledge of information and cybersecurity domains and standards (e.g., NIST CSF, ISO27001).
• Experience delivering/working within ISO27001, NIST CSF frameworks and third-party risk management processes.
• Experience with GRC platforms and Microsoft tooling; ability to train and awareness campaigns.

Responsibilities

• Support creation of information and cybersecurity documentation for certification and compliance (ISO27001, EU NIS2).
• Own or support information security controls managed by I&T GRC, including risk process management and awareness campaigns.
• Respond to customer security assurance requirements and supplier security schedules.

Skills

NIST CSF knowledge

ISO27001 knowledge

Information security frameworks

Communicating IT/InfoSec concepts

Analytical/problem-solving

Time management

Travel readiness

Education

Computer Science or Information Security degree

ISO27001 lead / ISC2 certification advantageous

Tools

GRC platforms

Microsoft tooling

Phishing simulation tools

Job description

DS Smith is seeking an I&T GRC professional to support information security controls, risk management, and awareness initiatives across the organization. The role involves documentation for ISO27001 and EU NIS2, and collaboration with IT and business stakeholders to improve security posture.

You will engage with customers and suppliers on assurance requirements, and may travel up to 20% for on-site engagements. Fluency in English is required.