Information Security Specialist

Intellias; Polska; On-site; PLN 180,000 - 260,000; Full time

Job summary

Intellias is seeking an IT security professional to govern and enhance ISO 27001:2022 ISMS, ensure DORA-compliant ICT risk governance, and perform risk analyses. You will collaborate with product, development, and SecOps teams to implement secure architecture and robust controls.

The role demands 3+ years in IT security, a strong foundation in security standards, and fluency in English. German is a plus, and the team operates within a global FinTech context in Poland.

Qualifications

• University degree in computer science or a comparable education.
• 3+ years of experience in the IT security domain.
• Experience with security certifications (CISSP, CRISC, CISM, ISO27001 Lead Implementer/Auditor) is a plus.
• Experience developing security processes, policies and incident management.

Responsibilities

• Maintain and enhance ISO 27001:2022 ISMS and policy framework.
• Oversee and maintain DORA ICT risk governance and third-party risk oversight.
• Run risk analyses in line with regulations and Three-Lines-of-Defence model.
• Advise product teams on secure architecture and zero-trust networking.
• Define and monitor technical controls with Development, Infrastructure, and SecOps teams.
• Manage threat intelligence, security monitoring and intrusion detection platforms.
• Lead and coordinate cybersecurity exercises to test controls and incident response.

Skills

ISO 27001

DORA compliance

Risk management

Security architecture

Threat intelligence

Education

CS degree

Job description

Explore the future of FinTech! With superb engineering, we help the finance industry to change just in one click! Join the global Intellias team to develop top-of-the-line solutions for the world’s leading FinTech companies.

What project we have for you

360 Treasury Systems AG (360T AG) is an independent and globally-established trading venue with more than 250 employees and more than 50 different nationalities worldwide. As Deutsche Börse Group’s FX unit, 360T provides a web-based trading technology for over-the-counter (OTC) instruments, integration solutions and related services. We stand for innovation in the FX market. We are a dynamic company full of motivation, enthusiasm and an optimistic attitude. Our team consists of fast thinking and entrepreneurial minds who like to challenge the status quo and drive the company forward.

What you will do

Governance & ICT Risk

• Maintain and enhance our ISO 27001:2022 ISMS and policy framework
• Oversee and maintain compliance with DORA provisions concerning ICT risk governance and third-party risk oversight
• Run risk analyses in line with regulations, best practices, Three-Lines-of-Defence model

Engineering & Operations (First-Line Enablement)

• Security-by-Design Reviews: Advise product teams on secure architecture, zero-trust networking and segregation of duties
• Control Lifecycle: Define, monitor and improve technical controls (vulnerability management, hardening baselines, privileged access) together with Development, Infrastructure, and SecOps teams
• Tooling Strategy: Manage and optimise threat intelligence, security event monitoring, intrusion detection, deception, and related platforms to maintain effective coverage, efficiency, and automation

Detection & Response

• Manage the NIST-aligned lifecycle (prepare, detect, contain, eradicate, recover, lessons learned)
• Use threat intelligence, vulnerability reports, and similar news sources to assess changes in landscape, threats, and best practices, and provide thoughtful, innovative, and practical guidance to improve our processes and systems
• Coordinate regular cybersecurity exercises to test security controls, incident response processes, and operational resilience, driving continuous improvement

What you need for this

• University degree in computer science or a comparable education
• 3+ years of experience in the IT security domain. Certifications are a plus (CISSP, CRISC, CISM, ISO27001 Lead Implementer or Auditor)
• Working knowledge in implementing and maintaining security certifications (eg ISAE3402, SOC1, SOC2, ISO2700x etc) and maintaining compliance to international security standards
• Experience in the development of practical security processes, policies and standards and management of information security issues and incidents
• Track record of taking responsibility, working independently and without much supervision
• Highly motivated to learn about new topics, technologies, and business cases
• Proficient in spoken and written English is mandatory. German language skills are a plus