Hybrid Vendor Risk & Security Specialist

Pandora; Województwo mazowieckie; Hybrid; PLN 134,000 - 223,000; Full time

Benefits offered by this job

Hybrid work model

Product discounts at Pandora

Flexible working hours

Medicover medical care

Generali Life Insurance

Medicover Sport Card

Pension plan

Job summary

PANDORA’s Digital & Technology Hub in Warsaw is seeking a Supplier Risk Specialist to assess and manage information security risks from third‑party vendors. You will ensure vendors comply with policies, regulations, and best practices while collaborating with global teams.

The role requires 2+ years in vendor risk or information security, a cyber security degree, and fluency in English and Polish. Hybrid work in Warsaw with extensive benefits and career development opportunities.

Qualifications

• 2+ years in vendor risk management, information security, or related area.
• Bachelor’s degree in cyber security, information technology, risk management, or related field.
• Professional English and Polish proficiency, both verbal and written.
• Knowledge of cyber security frameworks, risk assessment methodologies and/or regulatory requirements would be beneficial.
• Experience with vendor risk management tools (BitSight, OneTrust, CyberVadis, CyberGRX) would be a plus.
• Certifications such as CISSP, CISM, CRISC, or CTPRP would be a plus.

Responsibilities

• Conducting information security risk assessments of third-party vendors, identifying threats, vulnerabilities, control and compliance gaps.
• Providing recommendations on vendor selection based on risk analysis and security posture.
• Continuously monitoring vendor security posture and risk levels through periodic reassessments and audits.
• Maintaining detailed records of vendor assessments and ensure audit readiness.
• Educating vendors on security best practices and required improvements as part of risk mitigation.
• Tracking, analyzing and reporting on vendor security risks, trends and remediation efforts.
• Developing and enhancing the Vendor Risk Management (VRM) methodologies, processes and tools.
• Staying up to date with emerging security threats, vulnerabilities and regulatory changes that may impact the VRM process.

Skills

Vendor risk management

Information security

Cybersecurity knowledge

Stakeholder management

English/Polish proficiency

Education

Cyber security degree

IT risk management degree

Tools

BitSight

OneTrust

CyberVadis

CyberGRX

Job description

PANDORA’s Digital & Technology Hub in Warsaw is seeking a Supplier Risk Specialist to assess and manage information security risks from third‑party vendors. You will ensure vendors comply with policies, regulations, and best practices while collaborating with global teams.

The role requires 2+ years in vendor risk or information security, a cyber security degree, and fluency in English and Polish. Hybrid work in Warsaw with extensive benefits and career development opportunities.