Information Security Officer · Łódź, Poland ·

Parkopedia; Województwo łódzkie; On-site; PLN 253,000 - 339,000; Full time

Job summary

A leading global mobility platform is looking for a skilled Information Security Officer in Poland. This role requires expertise in risk management, compliance, and effective communication. The successful candidate will have at least 5 years in information security with a focus on leadership and teamwork. Join us in shaping the security strategy and making a lasting impact.

Qualifications

• 5+ years of experience in an information security role.
• At least 2 years in a leadership position.
• Relevant certifications (CRISC, CISSP, CISA, CISM) preferred.

Responsibilities

• Identify, assess, and mitigate security risks.
• Develop training programs for security awareness.
• Ensure compliance with security standards (ISO 27001, PCI DSS, GDPR).
• Lead policy and procedure development in security.
• Assess security posture of third-party vendors.
• Implement Data Loss Prevention (DLP) solutions.
• Contribute to security frameworks (NIST, CIS).
• Collaborate with business units for security alignment.
• Operate Governance, Risk, and Compliance (GRC) program.
• Lead and mentor security team.

Skills

Risk Management Expertise

Strategic Mindset

Technical Proficiency

Communication & Collaboration

Leadership

Adaptability

Education

Bachelor's degree in Computer Science or related field

Job description

Elevate Our Security Posture: Join Us as an Information Security Officer

Are you passionate about safeguarding critical information assets? Do you thrive in a dynamic environment where you can make a real impact on security strategy? We're seeking a highly motivated and experienced Information Security Officer to join our collaborative team and play a key role in protecting our organization.

Your Mission:

Reporting to the CISO, you'll be a driving force in developing, implementing, and continuously improving our security program. You'll proactively identify and mitigate risks, ensure compliance with industry standards, and champion a strong security culture across the organization.

What You'll Do:

• Risk Management: Proactively identify, assess, and mitigate security risks and vulnerabilities.
• Security Awareness: Develop and deliver engaging training programs to educate employees on security best practices.
• Compliance: Ensure adherence to relevant security standards and regulations (ISO 27001, PCI DSS, GDPR).
• Policy & Procedure Development: Lead the creation and maintenance of clear and concise security policies and procedures.
• Third-Party Risk Management: Assess and manage the security posture of third-party vendors and partners.
• Data Protection: Define requirements and contribute to implementing Data Loss Prevention (DLP) solutions.
• Security Frameworks: Contribute to the adoption and implementation of industry-leading security frameworks (NIST, CIS).
• Business Partnership: Collaborate closely with business units to understand their security needs and align with the overall security strategy.
• GRC Program: Operate and mature our Governance, Risk, and Compliance (GRC) program.
• Leadership & Collaboration: Lead and mentor a team of security professionals, fostering a culture of collaboration and continuous improvement.

What You Bring:

• Strategic Mindset: Deep understanding of business goals and objectives, with the ability to align cybersecurity risk management with overall business strategy.
• Risk Management Expertise: Proven ability to identify, assess, and prioritize cybersecurity risks.
• Technical Proficiency: In-depth knowledge of cybersecurity principles, security controls, incident response, and industry frameworks.
• Communication & Collaboration: Excellent communication skills, with the ability to translate complex technical concepts for non-technical audiences.
• Leadership: Proven ability to lead and mentor a team of security professionals.
• Thrive in a Fast-Paced Environment: Experience contributing to and managing cybersecurity within a high-growth company.

Qualifications:

• Bachelor's degree in Computer Science, Information Security, or a related field.
• 5+ years of experience in an information security role, with at least 2 years in a leadership position.
• Relevant certifications (CRISC, CISSP, CISA, CISM) are preferred.

Join our team and make a lasting impact on our security posture. Apply now!

About us

Arrive, including brands like EasyPark, Flowbird, RingGo, ParkMobile and Parkopedia, is a leading global mobility platform. Present in over 90 countries and 20,000 cities, the company helps people and decision-makers make smarter decisions about urban mobility and ease the experience of travel worldwide. Arrive delivers a unique combination of the core ingredients to make cities more livable: from smart payments and optimized car parks to data-driven traffic reduction and support for reinvestment in public transport and green space. It’s about more than function, it’s about saving time and simplifying the experience of travel for everyone. Travel is more than a journey, it’s how you Arrive.