InfoSec GRC Lead: Risk, Policy & Compliance

MacGregor; Województwo pomorskie; Sur place; PLN 140 000 - 180 000; Plein temps

Résumé du poste

MacGregor is seeking an Information Security Governance, Risk & Compliance Manager to lead our information security governance, risk, and compliance programs. You will shape policies, run risk assessments, audits, training, and remediation across the organization, reporting to the Director, Information Security in Finland.

Based in Gdansk or Sofia, you will drive resilience and regulatory alignment. You will collaborate with cross-functional teams, manage third-party risk, and stay current on

Qualifications

• Bachelor's degree in Information Security, CS, or related field.
• Certifications such as CISA, CRISC, CISSP, CISM, or ISO 27001 preferred.
• 2–5 years of information security, risk management, audit, or compliance experience.
• Working knowledge of NIST, ISO 27001, NIS2, GDPR.
• Ability to present information clearly to technical and non-technical audiences.
• Proficiency with Microsoft Office.

Responsabilités

• Develop, implement, and maintain information security policies, standards, and procedures.
• Conduct risk assessments to identify, evaluate, and prioritize risks; maintain the risk register.
• Coordinate and support internal and external audits.
• Track remediation of audit findings and control gaps through to closure.
• Manage third-party/vendor risk assessments, including security questionnaires and reviews.
• Monitor compliance and manage controls aligned with frameworks, laws, regulations, and contracts.
• Develop and deliver security awareness and compliance training.
• Support incident response and business continuity/disaster recovery planning.
• Prepare reports for leadership on risk posture, compliance status, and audit progress.
• Stay current on emerging regulations, threats, and industry best practices.

Connaissances

Information security

Risk assessment

Policy development

Audits

Vendor risk

Formation

Bachelor's degree in Information Security or related field

Description du poste

MacGregor is seeking an Information Security Governance, Risk & Compliance Manager to lead our information security governance, risk, and compliance programs. You will shape policies, run risk assessments, audits, training, and remediation across the organization, reporting to the Director, Information Security in Finland.

Based in Gdansk or Sofia, you will drive resilience and regulatory alignment. You will collaborate with cross-functional teams, manage third-party risk, and stay current on