Hybrid Cyber Risk Lead – Global Supplier IT (SITRM)

Sysco; Poland; Hybrid; PLN 180,000 - 240,000; Full time

Benefits offered by this job

Global cybersecurity team

Hybrid work Kraków office

Professional development

Job summary

Sysco in Kraków, Poland, seeks a Lead Analyst - Cybersecurity (SITRM) to execute and support its global SITRM program. This hybrid, full-time role is based in Kraków with standard local hours.

The successful candidate will assess supplier cyber risk across the lifecycle and partner with vendor management, technology, and business teams to reduce risk. A Bachelor's in IT and 6+ years in security risk are expected; strong communication and cross-functional skills are essential.

Qualifications

• Bachelor’s degree in IT, information systems, computer science or related field.
• 6+ years in IT audit, supplier IT risk or third-party security risk management.
• Strong requirements gathering, process mapping and documenting.
• Experience in application, network and cloud security assessments.
• Familiar with third-party risk assessment methodologies and tools.
• Knowledge of Shared Assessments TPRM practices and questionnaires.
• Excellent written and verbal communication across stakeholders.

Responsibilities

• Execute security risk assessments for suppliers across lifecycle and act as primary contact for international assessments.
• Collaborate with stakeholders to review cybersecurity terms in supplier agreements.
• Support program enhancements and train teams on changes.
• Prepare and communicate monthly program metrics to stakeholders.
• Provide input on third-party security controls, exceptions and remediation plans.

Skills

Security risk assessment

Vendor management

Stakeholder communication

Cloud security

IT audit

Cross-functional collaboration

Supply chain risk

Analytical thinking

Training & mentoring

Education

Bachelor’s Degree in IT

Tools

Archer

Job description

Sysco in Kraków, Poland, seeks a Lead Analyst - Cybersecurity (SITRM) to execute and support its global SITRM program. This hybrid, full-time role is based in Kraków with standard local hours.

The successful candidate will assess supplier cyber risk across the lifecycle and partner with vendor management, technology, and business teams to reduce risk. A Bachelor's in IT and 6+ years in security risk are expected; strong communication and cross-functional skills are essential.