Hybrid Third-Party Cybersecurity Risk Specialist (Warsaw)

Link Group; Województwo mazowieckie; Hybrid; PLN 180.000 - 300.000; Vollzeit

Zusammenfassung

Link Group is seeking an experienced Third-Party Cybersecurity Risk Specialist in Warsaw to evaluate external vendors, SaaS providers, and technology partners. You will assess security controls, data flows, and third-party audits to support risk decisions in a complex enterprise.

You will collaborate with IT, Legal, Compliance, and Procurement to identify vulnerabilities, track remediation, and improve risk methodologies while monitoring evolving threats and regulatory expectations.

Qualifikationen

• 5+ years in cybersecurity or TPRM
• Experience evaluating security controls and audits
• Strong cloud security and IAM knowledge
• Familiar with NIST CSF, ISO 27001, SOC 2
• Bachelor's degree in a related field

Aufgaben

• Conduct technical security reviews of external vendors and partners
• Evaluate controls, architectures, data flows, and integrations
• Review SOC 2, ISO certifications, penetration tests, and vulnerability assessments
• Assess security across cloud, IAM, networks, application security, and incident response
• Identify gaps, validate findings with stakeholders, and propose remediation
• Prepare structured risk assessment reports with impact and mitigations
• Collaborate with IT, Security, Legal, Compliance, and Procurement
• Enhance assessment workflows, reporting standards, and risk methodologies
• Monitor emerging threats and regulatory expectations

Kenntnisse

Vendor risk assessment

Security controls evaluation

Cloud security (AWS/Azure/GCP)

IAM & network defense

SOC 2 / ISO 27001 knowledge

Effective communication

Ausbildung

Bachelor's degree in Cybersecurity/CS/Information Systems

Tools

OneTrust

ProcessUnity

Archer

Prevalent

Jobbeschreibung

Link Group is seeking an experienced Third-Party Cybersecurity Risk Specialist in Warsaw to evaluate external vendors, SaaS providers, and technology partners. You will assess security controls, data flows, and third-party audits to support risk decisions in a complex enterprise.

You will collaborate with IT, Legal, Compliance, and Procurement to identify vulnerabilities, track remediation, and improve risk methodologies while monitoring evolving threats and regulatory expectations.