Hybrid IT Risk & Security Controls Specialist – Krakow

Luxoft Poland; Kraków; Hybrid; PLN 150.000 - 260.000; Vollzeit

Benefits dieser Stelle

Private medical insurance

Dental insurance

Life insurance

MyBenefit program

Internal mobility

Zusammenfassung

Luxoft Poland in Kraków seeks an IT Risk and Controls Expert to strengthen cybersecurity, assess IS risks, and guide risk-based decisions. You’ll conduct security assessments of internal projects and third‑party providers, offer security advisory services to stakeholders, and drive remediation discussions to improve control effectiveness.

The role covers cybersecurity management, project coordination, and security risk governance within a regulated financial services context, including

Qualifikationen

• Demonstrable experience in Information Security (IS), Cybersecurity, IT Risk Management, or a related field.
• Experience operating within financial services, investment banking, or other regulated environments.
• Familiarity with industry frameworks and standards such as NIST CSF, ISO 27001, CIS Controls, or COBIT.
• Strong understanding of information security principles, risk management methodologies, and control frameworks.
• Experience providing security advisory and consulting services to technical and non-technical stakeholders.
• Ability to drive risk remediation discussions and influence stakeholders to achieve security objectives.
• Proven experience in cybersecurity risk management, security assessments, and control effectiveness reviews.
• Strong knowledge of cloud security concepts and cloud-related risk management practices.
• Experience assessing third-party service providers and managing associated security risks.
• Ability to provide clear, risk-based security advice and influence stakeholders at all organizational levels.
• Strong communication skills, with the ability to translate technical findings into actionable business recommendations.
• Excellent analytical and problem-solving capabilities, coupled with a practical approach to risk management.

Aufgaben

• Security Assessments: Conduct security assessments of internal projects and third-party service providers to evaluate control effectiveness and compliance with security requirements.
• Security Consulting: Provide security advisory services to stakeholders, offering guidance on security controls, risk treatment options, and policy requirements in business-friendly language.
• Project Management: Coordinate and manage security-related projects and initiatives, ensuring timely delivery and alignment with cybersecurity objectives.
• Third-Party Risk Management: Drive discussions regarding identified risks, communicate potential business impacts, and provide guidance on appropriate remediation actions.
• Cybersecurity: Manage cybersecurity-related activities, including the identification, assessment, and mitigation of information security (IS) risks.

Kenntnisse

Information security

Cybersecurity

IT risk management

Risk remediation discussions

Cloud security

Jobbeschreibung

Luxoft Poland in Kraków seeks an IT Risk and Controls Expert to strengthen cybersecurity, assess IS risks, and guide risk-based decisions. You’ll conduct security assessments of internal projects and third‑party providers, offer security advisory services to stakeholders, and drive remediation discussions to improve control effectiveness.

The role covers cybersecurity management, project coordination, and security risk governance within a regulated financial services context, including