Group Cloud Security Officer (m/f/d)

KRUK S.A.; Wrocław; Hybrid; PLN 240,000 - 360,000; Full time

Benefits offered by this job

Flexible starting hours

Full remote option / hybrid model

Private medical care (Luxmed)

Multisport card subsidy

Cafeteria benefits

Mindgram platform access

Employee referral bonus

Company car for private use

Job summary

KRUK S.A. is seeking a Group Cloud Security Officer to lead the cloud security program across the organization. You will define and monitor the security framework, oversee standards for Azure and GCP, and collaborate with global teams to raise security maturity.

You’ll drive risk assessment and compliance initiatives, create practical training, and ensure KNF-aligned governance. A hybrid/remote role with international scope awaits.

Qualifications

• Minimum 3 years of hands-on cloud security experience (Azure, GCP) in a financial institution.
• Willingness to participate in IT security audits and maintain thorough documentation.
• Fluent in English and Polish (B2+).
• Understanding of ISO27001, data protection laws, and project basics.

Responsibilities

• Define and monitor the cloud security management framework.
• Design and monitor information security standards for Azure and GCP.
• Support risk assessment, drive compliance and risk mitigation.
• Develop and deliver straightforward security training programs.
• Align Security Policy with KNF guidance for the financial industry.

Skills

Cloud security

Azure

GCP

Microsoft 365 security

Risk management

Security audits

Documentation

Cross-border collaboration

Education

University degree in IT/Engineering

CISP, CISA, CISM certifications (plus)

Tools

Azure Security Center

Google Cloud Security Center

MS 365 security tools

Job description

Are you ready to make a real impact in information security within one of Europe's leading debt collection firms? We are looking for a Group Cloud Security Officer to join our team. In this role, your independent judgement is crucial, and we value pragmatism over bureaucracy. Your insights will significantly influence our security strategies, and your ability to work across borders will be key to establishing new standards in information security. Here, your voice is crucial, as we aim to promote a strong security culture on a global scale.

We are searching for someone excited to make a difference and face the task of keeping our digital world safe. If you're keen to use your skills in a team that likes straightforward solutions and working together worldwide.

Key Responsibilities:

• Define and monitor the cloud security management framework.
• Design and monitor group information security standards for various cloud platforms in the organization (Azure, GCP) to ensure a uniform level of security across the Capital Group.
• Support the risk assessment process, helping to drive compliance and risk mitigation strategies.
• Help build a strong security awareness within the company by creating and delivering straightforward training programs.
• Align the Security Policy with guidelines published by the Polish Financial Supervision Authority (KNF) for the financial industry, ensuring regulatory compliance.
• Keep up with industry best practices in IT security and apply them within our organization.
• Work closely with our headquarters' Cybersecurity Team and Security Representatives from other countries to ensure a consistent approach to information security.
• Review and provide feedback on the security aspects of IT tools and business partnerships.
• Maintain direct communication with our international security teams, ensuring a united security effort.

Requirements:

• Minimum 3 years of hands-on experience in cloud security, with practical knowledge of Azure, Microsoft 365, and GCP security tools ideally within a financial institution.
• Willingness to engage in IT security audits.
• Strong documentation skills and attention to detail.
• Fluent in English and Polish, with proficiency at B2 level or higher.
• Understanding of information security standards, like ISO27001, and familiarity with data protection laws and project management basics.
• Active approach towards managing risks.
• A university degree in IT, engineering, or a related field
• Certifications such as CISP, CISA, CISM are a plus.
• Awareness of ISO27001, DORA, PFSA (KNF) Security Guidelines, and other security standards.
• Knowledge of cloud computing best practices, especially with Microsoft Azure and Microsoft 365.
• Microsoft Azure and Google Cloud certifications.

What We offer:

• Employment based on employment contract
• Flexible starting hours
• Possibility of full remote work / hybrid model (depending on the place of residence)
• Attractive employee benefits package: private medical care (Luxmed), subsidy for Multisport card, additional benefits tailored to your needs within the cafeteria system, group insurance for employees on preferential terms
• Enjoy Mindgram - a modern platform offering professional psychological support and wellbeing tools
• Opportunity to receive an attractive bonus in the employee referral program
• Possibility to rent a company car for private use

We are dedicated to creating an inclusive recruitment process that upholds the principles of equal opportunity. Our focus is on candidates' competencies and their willingness to grow, regardless of gender, age, disability, religion, sexual orientation, background, or any other factors unrelated to their qualifications. We go the extra mile to ensure the recruitment process is accessible and thoughtfully tailored to accommodate individual needs.