Information Security Leader: AWS, Risk & Compliance

Nortal; Poland; On-site; PLN 240,000 - 360,000; Full time

Job summary

Nortal is seeking an Information Security Manager to strengthen security across a complex technology landscape and embed a security-first culture. You will partner with engineering, product, technology and business teams to identify risks and ensure effective controls across AWS Cloud and on‑prem environments.

As a trusted security advisor, you will guide policies, risk management, vulnerability handling and incident response, and help integrate security into Agile development to deliver secure

Responsibilities

• Define and support the delivery of information security initiatives aligned with business priorities and the wider security strategy.
• Act as a security partner and trusted advisor to technology and business stakeholders across the Domain.
• Promote a security-first culture and embed secure ways of working across teams.
• Provide expert guidance on security policies, standards, controls and best practices.
• Identify, assess and manage information security risks, ensuring pragmatic and cost-effective mitigation.
• Support the protection of TUI’s critical systems, applications, data and other information assets.
• Ensure appropriate security assurance, testing and controls are in place across the technology landscape.
• Work closely with engineering and delivery teams to embed security into Agile and software development processes.
• Support security operations, including vulnerability management, patching and security monitoring.
• Coordinate the effective management of security incidents and ensure lessons learned are translated into improvements.
• Monitor and support remediation of audit findings and security control gaps.
• Help reduce the organisation’s attack surface and proactively identify emerging security risks.
• Report on the effectiveness of the security programme using agreed KPIs and drive continuous improvement.
• Work across both AWS Cloud and on-premises environments, ensuring appropriate security controls are implemented and maintained.
• Collaborate with security teams and stakeholders across TUI’s international organisation.

Job description

Nortal is seeking an Information Security Manager to strengthen security across a complex technology landscape and embed a security-first culture. You will partner with engineering, product, technology and business teams to identify risks and ensure effective controls across AWS Cloud and on‑prem environments.

As a trusted security advisor, you will guide policies, risk management, vulnerability handling and incident response, and help integrate security into Agile development to deliver secure