Information Security Officer IRC305340

GlobalLogic; Kraków; On-site; PLN 170,000 - 210,000; Full time

Benefits offered by this job

Diversity & Inclusion

Career development

Relocation options

Flexible opportunities

Job summary

GlobalLogic Kraków is seeking a Security Risk & Compliance expert to lead ISO 27001/27002 ISMS design, implementation and audits, and to manage SOC 2 assessments. You will drive audit planning, reporting, and remediation, collaborating with stakeholders, and communicating security concepts to both technical and non-technical teams; fluent English is required and 5+ years of experience.

Join a global digital engineering partner that values diversity and professional growth, with opportunities to

Qualifications

• Proven experience designing, implementing, and maintaining ISMS (ISO 27001/27002).
• Proven SOC 2 compliance assessments experience.
• Experience conducting comprehensive ISMS audits and reporting.
• Lead audits and provide actionable security improvements.
• Excellent communication skills for internal and external stakeholders.
• Fluent English and ability to explain security concepts clearly.
• 5+ years of professional information security experience.

Responsibilities

• Execute internal information security audits (ISO 27001, ITGC) to identify vulnerabilities and ensure regulatory compliance.
• Handle external information security audits (ISO 27001, SOC2 Type II).
• Manage the team’s participation in auditing activities.
• Develop and document processes and control policies around ISO 27001.
• Handle information security incidents and response.
• Manage risk assessments and mitigation strategies for security risks.
• Develop and enforce security policies, procedures, and guidelines.
• Oversee monitoring of security events and incident response.
• Evaluate security technologies and present reports to management.

Skills

ISMS ISO 27001/27002

SOC 2 compliance

ISMS audits

Security audits

Communication

English proficiency

5+ years experience

Education

Relevant degree

Job description

Description

Security Risk & Compliance

Requirements

• Proven experience in designing, implementing, and maintaining Information Security Management Systems (ISMS) based on ISO 27001/27002 standards is essential for this position;
• Proven experience in SOC 2 compliance assessments;
• Proven experience in conducting comprehensive ISMS audits, including planning, execution, and reporting, to ensure continuous compliance and identify areas for improvement;
• Proven expert capability in leading and performing various security audits, assessing controls, and providing actionable recommendations to enhance the organization’s security posture;
• Excellent communication skills to interact with internal and external contacts required;
• Interpersonal and collaborative skills and the ability to communicate security and risk concepts to technical and non-technical audiences required;
• High level of personal integrity and the ability to professionally handle confidential matters with proper judgment required
• Excellent knowledge of English;
• 5+ years of professional experience;

Required Skills:

• Proven experience in designing, implementing, and maintaining Information Security Management Systems (ISMS) based on ISO 27001/27002 standards is essential for this position;
• Proven experience in SOC 2 compliance assessments;
• Proven experience in conducting comprehensive ISMS audits, including planning, execution, and reporting, to ensure continuous compliance and identify areas for improvement;
• Proven expert capability in leading and performing various security audits, assessing controls, and providing actionable recommendations to enhance the organization’s security posture;
• Excellent communication skills to interact with internal and external contacts required;
• Interpersonal and collaborative skills and the ability to communicate security and risk concepts to technical and non-technical audiences required;
• High level of personal integrity and the ability to professionally handle confidential matters with proper judgment required
• Excellent knowledge of English;
• 5+ years of professional experience;

Job Responsibilities

• Execution of internal information security audits (ISO 27001, ITGC etc.) to identify vulnerabilities and ensure compliance with regulatory requirements;
• Handling of external information security audits (ISO 27001, SOC2 Type II etc.);
• Managing the team’s participation in internal and external auditing activities;
• Develop and document processes and control policies and maintain a Security Framework built around ISO 27001;
• Handling of information security incidents;
• Managing risk assessments and developing mitigation strategies to address identified security risks across the enterprise;
• Develop and enforce security policies, procedures, and guidelines to protect organizational assets and data integrity;
• Oversee the continuous monitoring and analysis of security events, responding effectively to incidents and breaches;
• Evaluate and recommend security technologies and solutions to enhance the organization’s overall cybersecurity posture;
• Prepare and present detailed security reports and compliance metrics to management and relevant stakeholders;

What we offer

Empowering Projects: With 500+ clients spanning diverse industries and domains, we provide an exciting opportunity to contribute to groundbreaking projects that leverage cutting-edge technologies. As a team, we engineer digital products that positively impact people’s lives.

Empowering Growth: We foster a culture of continuous learning and professional development. Our dedication is to provide timely and comprehensive assistance for every consultant through our dedicated Learning & Development team, ensuring their continuous growth and success.

DE&I Matters: At GlobalLogic, we deeply value and embrace diversity. We are dedicated to providing equal opportunities for all individuals, fostering an inclusive and empowering work environment.

Career Development: Our corporate culture places a strong emphasis on career development, offering abundant opportunities for growth. Regular interactions with our teams ensure their engagement, motivation, and recognition. We empower our team members to pursue their career goals with confidence and enthusiasm.

Comprehensive Benefits: In addition to equitable compensation, we provide a comprehensive benefits package that prioritizes the overall well-being of our consultants. We genuinely care about their health and strive to create a positive work environment.

Flexible Opportunities: At GlobalLogic, we prioritize work-life balance by offering flexible opportunities tailored to your lifestyle. Explore relocation and rotation options for diverse cultural and professional experiences in different countries with our company.

About GlobalLogic

GlobalLogic, a Hitachi Group Company, is a trusted digital engineering partner to the world’s largest and most forward-thinking companies. Since 2000, we’ve been at the forefront of the digital revolution – helping create some of the most innovative and widely used digital products and experiences. Today we continue to collaborate with clients in transforming businesses and redefining industries through intelligent products, platforms, and services.