Hybrid Vendor Risk & Security Specialist

Pandora; Warszawa; Hybrid; PLN 120,000 - 180,000; Full time

Benefits offered by this job

Hybrid work model

Premium medical care

Generali Life Insurance

Medicover Sport Card

PPE

Employee Pension Plans

Discounts on Pandora products

Flexible working hours

Home office equipment subsidy

Employee Referral Program

Job summary

PANDORA’s Digital & Technology Hub in Warsaw is seeking an Associate Specialist, Supplier Risk to assess and manage information security risks of third-party vendors. You will ensure vendors comply with information security policies and industry regulations, partnering with internal stakeholders and external suppliers.

Ideal candidates have 2+ years in vendor risk or information security, a related bachelor's degree, and strong English and Polish.

Qualifications

• 2+ years of experience in vendor risk management, information security, or a related area.
• Bachelor's degree in cyber security, information technology, risk management, or related field.
• Professional English and Polish proficiency, both verbal and written.
• Knowledge of cyber security frameworks, risk assessment methodologies and regulatory requirements would be beneficial.

Responsibilities

• Conduct information security risk assessments of third-party vendors, identifying threats, vulnerabilities, controls gaps.
• Provide recommendations on vendor selection based on risk analysis and security posture.
• Continuously monitor vendor security posture and risk levels through reassessments and audits.
• Maintain detailed records of vendor assessments and ensure audit readiness.
• Educate vendors on security best practices and required improvements as part of risk mitigation.

Skills

Vendor risk management

Stakeholder management

English and Polish proficiency

Cyber security frameworks

Regulatory awareness

Education

Bachelor's degree in cyber security or related field

Tools

BitSight

OneTrust

CyberVadis

CyberGRX

Job description

PANDORA’s Digital & Technology Hub in Warsaw is seeking an Associate Specialist, Supplier Risk to assess and manage information security risks of third-party vendors. You will ensure vendors comply with information security policies and industry regulations, partnering with internal stakeholders and external suppliers.

Ideal candidates have 2+ years in vendor risk or information security, a related bachelor's degree, and strong English and Polish.