Information Security Specialist

Devonshire; Warszawa; On-site; PLN 180,000 - 280,000; Full time

Benefits offered by this job

International team

Professional development

Real impact on projects

Stable employment

Friendly office in Warsaw

Job summary

Paragon Works is seeking an Information Security & Compliance professional to maintain the ISMS under ISO 27001 and oversee GDPR compliance. You will create and update policies, perform risk analyses, and coordinate internal and external audits.

The role requires collaboration across departments, strong analytical ability, and experience with MS Office/MS 365 in a fast-paced, international environment in Warsaw.

Qualifications

• Knowledge of ISO 27001 and GDPR regulations.
• At least two years as ISMS Representative per ISO 27001.
• Higher education in relevant field; cybersecurity focus preferred.
• Certification as internal auditor or ISMS representative per ISO 27001.
• Experience conducting information security risk analyses.
• English at least C1 for international communication.

Responsibilities

• Maintain and improve the Information Security Management System per ISO 27001.
• Create and maintain internal policies and procedures; monitor compliance.
• Ensure compliance with contractual requirements and GDPR.

Skills

ISO27001 knowledge

GDPR knowledge

Risk analysis

Analytical skills

Communication skills

Organizational skills

Education

Bachelor's degree in CS/IT/CCybersecurity

ISO27001 Internal Auditor / ISMS Rep certification

Tools

MS Office

MS 365

Job description

About us:

Paragon Works is a global creative and marketing support company that works with recognizable brands to deliver high-quality materials. We are characterized by efficiency and the ability to operate on a large scale. We work with international clients from various industries, combining creativity with efficient process organization.

About the role:

We are looking for a person who will play a key role in the area of information security and compliance of the organization with the requirements of standards, customers and legal regulations. If you can effectively combine knowledge in the field of information security with the ability to build and improve processes, as well as freely cooperate with various departments of the organization, this role is for you.

Your scope of duties

• Maintaining and improving the Information Security Management System according to the ISO 27001 standard
• Creating and maintaining internal policies and procedures, supervising their compliance
• Supervision of compliance with contractual requirements and regulations (e.g. GDPR)
• Coordinating and conducting internal security audits and monitoring the implementation of corrective actions
• Coordination of periodic external audits
• Conducting risk analysis in information security
• Analyzing customer contracts in terms of information security requirements
• Organization of tests and reviews (e.g. security tests, business continuity tests, access reviews)
• Oversight of incident, threat and vulnerability management
• Substantive support for business departments in the field of information security and compliance
• Staff training in information security and personal data protection
• Preparing reports and analyses

Our requirements:

• Knowledge of the ISO 27001 standard and GDPR regulations
• At least two years of experience as an ISMS Representative according to the ISO 27001 standard
• Higher education, preferred fields: computer science, information security management, risk management, cybersecurity
• Certificate of internal auditor or ISMS representative according to the ISO 27001 standard
• Experience in conducting risk analysis in information security
• English language skills at least C1 (international communication)
• Proficient in MS Office and the ability to work in an MS 365 environment
• Analytical, communication and organizational skills

Good to have:

• Knowledge of DORA, NIS2, KSC regulations
• Knowledge of other standards, such as ISO 22301 and ISO 31000

What we offer:

• Participation in projects of strategic importance for the development of the company
• Work in an international team that values development, autonomy and collaboration
• Opportunity for professional development and gaining experience
• Real impact on ongoing projects
• Stable employment and the possibility of development within the company's structures
• Friendly office in Warsaw

Paragon is committed to creating an inclusive and accessible workplace where everyone feels valued, respected and able to thrive. We welcome applications from individuals of all backgrounds, experiences and perspectives. All qualified applicants will be considered fairly and without discrimination on the basis of race, ethnicity, gender, gender identity or expression, sexual orientation, disability, age, religion or belief, marital or civil partnership status, pregnancy or maternity, or any other characteristic protected by applicable law. If you require any reasonable adjustments or additional support during the application process, please let us know and we will be happy to assist.