Information Security Governance, Risk & Compliance Manager

Sapsf; Województwo pomorskie; Sur place; PLN 285 000 - 394 000; Plein temps

Résumé du poste

MacGregor is seeking an Information Security Governance, Risk & Compliance Manager to develop and maintain governance, risk, and compliance programs. You will shape policies, standards, and training, drive audits, and manage risk across the organization.

You will lead remediation efforts, coordinate internal and external audits, and oversee third-party risk assessments while staying current with regulations and industry best practices.

Qualifications

• Good written and verbal communication skills.
• Strong analytical and organizational skills.
• Collaborative mindset and comfort working cross-functionally.
• Bachelor's degree in Information Security, Computer Science, Business, or related field (or equivalent practical experience).
• Relevant certifications preferred, but not required, such as CISA, CRISC, CISSP, CISM, or ISO 27001 Lead Auditor/Implementer.
• 2–5 years of experience in information security, risk management, internal audit, or compliance.
• Working knowledge of common frameworks and regulations (e.g., NIST, ISO 27001, NIS2, GDPR).
• Ability to present information in clear, sufficient and understandable manner
• Proficiency with Microsoft Office, particularly spreadsheets and presentations.

Responsabilités

• Develop, implement, and maintain information security policies, standards, and procedures.
• Conduct risk assessments to identify, evaluate, and prioritize risks; maintain the risk register.
• Coordinate and support internal and external audits.
• Track remediation of audit findings and control gaps through to closure.
• Manage third-party/vendor risk assessments, including security questionnaires and reviews.
• Monitor compliance and manage controls aligned with frameworks, laws, regulations, and contractual obligations.
• Develop and deliver security awareness and compliance training.
• Support incident response and business continuity/disaster recovery planning.
• Prepare reports for leadership on risk posture, compliance status, and audit progress.
• Stay current on emerging regulations, threats, and industry best practices.

Connaissances

Communication skills

Analytical skills

Cross-functional collaboration

Formation

Bachelor's degree in Information Security, Computer Science, Business, or related field

Certifications: CISA, CRISC, CISSP, CISM, ISO 27001 Lead Auditor/Implementer

Outils

Microsoft Office

Description du poste

Career Opportunities: Information Security Governance, Risk & Compliance Manager (25438)

Requisition ID25438-Posted07/10/2026

MacGregor is a global company that operates in 30 countries with 2000 employees. We provide sustainable cargo and load handling with a strong portfolio of products, services, and solutions to the maritime and offshore industries. Our solutions are found in over half of the world's merchant fleet.

We believe MacGregor is a great place to work and we are looking for innovators with an international mindset to join our team and help us create lifetime value for our customers.

MacGregor – Let's shape the future together

As an Information Security Governance, Risk & Compliance Manager, you develop and maintain our information security Governance, Risk and Compliance programs.

When it comes to Governance and Change Management, you will develop and maintain information security policies, standards, and procedures based on compliance and cyber defense requirements. You will develop and maintain security awareness and compliance training as well as drive improvement initiatives across the Information Security landscape.

On the side of risk you will manage and shape how the organization identifies, documents, and responds to information security risk.

In terms of compliance you will build, maintain, and mature our information security and compliance procedures, leading internal and external audits, ensuring our controls are well-designed, well-documented, and operating effectively.

You will in the role also support other cyber and information security activities to ensure resilience and overall success for MacGregor.

More tasks and responsibilities

Develop, implement, and maintain information security policies, standards, and procedures

Conduct risk assessments to identify, evaluate, and prioritize risks; maintain the risk register

Coordinate and support internal and external audits

Track remediation of audit findings and control gaps through to closure

Manage third-party/vendor risk assessments, including security questionnaires and reviews

Monitor compliance and manage controls are aligned with relevant frameworks, laws and regulations, and contractual obligations

Develop and deliver security awareness and compliance training

Support incident response and business continuity/disaster recovery planning

Prepare reports for leadership on risk posture, compliance status, and audit progress

Stay current on emerging regulations, threats, and industry best practices

Reporting directly to the Director, Information Security (CISO) located in Finland. The position will be based in MacGregor’s office in Gdansk or Sofia.

What you’ll need to succeed

Good written and verbal communication skills, with the ability to translate varied requirements into understandable and implementable controls, risks and initiatives for both technical and non-technical audiences will be key for a successful candidate. Sound judgment in prioritizing and escalating risk issues in addition to the ability to manage multiple activities and deadlines independently will help you in your daily work. Strong analytical and organizational skills with attention to detail as well as collaborative mindset and comfort working cross-functionally are crucial for this role.

Ideally you have:

Bachelor's degree in Information Security, Computer Science, Business, or a related field (or equivalent practical experience).

Relevant certifications preferred, but not required, such as CISA, CRISC, CISSP, CISM, or ISO 27001 Lead Auditor/Implementer.

2–5 years of experience in information security, risk management, internal audit, or compliance.

Working knowledge of common frameworks and regulations (e.g., NIST, ISO 27001, NIS2, GDPR).

Ability to present information in clear, suficient and understandable manner

Proficiency with Microsoft Office, particularly spreadsheets and presentations.

Why MacGregor?

Our people are behind every success. People create the technology and product lifecycle solutions that make us great, our people are the ones who innovate, and people drive our business forward. With us you will be part of an international collaborative working culture with challenges and opportunities to further develop yourself professionally.

• Customer Success:Our customer's success is our success. We focus on partnership, transparency, and accountability to deliver lifetime value.
• Passion to Improve:Always moving forward. We foster a growth mindset, encourage curiosity, and the courage to challenge the status quo.
• Winning Together:No one makes the difference alone. We emphasise internal collaboration and mutual trust to ensure we win as "One MacGregor."

MacGregor is an equal opportunity employer. We recognise that diversity is key to our continued success, and strive to maintain a fair and equitable recruitment process for all applicants.