IS SRC Consultant

ABB; Kraków; On-site; PLN 180,000 - 300,000; Full time

Job summary

ABB in Kraków is seeking an experienced Information Security, Risk & Compliance professional to safeguard assets and ensure regulatory alignment. You will lead security governance, risk assessments, and compliance initiatives while partnering with global teams to enhance the organization’s security posture.

The role requires 5–8 years in security and compliance, a relevant bachelor’s degree, and certifications (CISSP, CEH, ISO 27001 LA).

Qualifications

• 5–8 years in security and compliance roles.
• Must hold CISSP, CEH, ISO 27001 LA.
• Provides end-to-end security and compliance services across the organization.

Responsibilities

• Conduct security and compliance assessments with business stakeholders to identify, evaluate, and mitigate risks, ensuring alignment with organizational policies, standards, and regulatory requirements.
• Define, implement, and continuously improve security governance frameworks, assessment methodologies, processes, controls, and tools to strengthen risk management and secure technology adoption.
• Collaborate with cross-functional and global teams to deliver consistent security and compliance services, support key programs and initiatives, and achieve agreed KPIs, service targets, and business objectives.
• Partner with stakeholders to understand requirements, establish practical security expectations, communicate risks and recommendations, and provide regular reporting to service owners and leadership.
• Maintain comprehensive assessment documentation, evidence, and audit records while fostering strong working relationships, driving service improvements, and promoting effective teamwork to ensure high-quality delivery.

Skills

Security governance

Risk assessments

Compliance advisory

Education

Bachelor’s degree in IT / Cybersecurity

Job description

At ABB, we help industries run leaner and cleaner—and every person here makes that happen. You’ll be empowered to lead, supported to grow, and proud of the impact we create together. Join us and help run what runs the world.

This Position reports to

IS Department Manager for Compliance and Risk Advisory

Job role

The Information Security, Risk, and Compliance team is responsible for protecting the organization's information assets by implementing and maintaining effective security, risk management, and compliance practices. The team works closely with business and technology stakeholders to identify, assess, and mitigate cybersecurity risks while ensuring adherence to organizational policies, industry standards, and regulatory requirements. Through security assessments, compliance reviews, governance activities, and continuous monitoring, the team helps strengthen the organization's security posture and supports secure business operations. Additionally, the team drives continuous improvement initiatives, maintains audit readiness, and collaborates across global and cross-functional teams to safeguard critical systems, data, and infrastructure against evolving cyber threats.

• Conduct security and compliance assessments with business stakeholders to identify, evaluate, and mitigate risks, ensuring alignment with organizational policies, standards, and regulatory requirements.
• Define, implement, and continuously improve security governance frameworks, assessment methodologies, processes, controls, and tools to strengthen risk management and secure technology adoption.
• Collaborate with cross-functional and global teams to deliver consistent security and compliance services, support key programs and initiatives, and achieve agreed KPIs, service targets, and business objectives.
• Partner with stakeholders to understand requirements, establish practical security expectations, communicate risks and recommendations, and provide regular reporting to service owners and leadership.
• Maintain comprehensive assessment documentation, evidence, and audit records while fostering strong working relationships, driving service improvements, and promoting effective teamwork to ensure high-quality delivery.

Qualifications for the Role

• 5–8 years in security and compliance roles
• Bachelor’s degree in IT / Cybersecurity or similar
• Influence on security and compliance risk assessments and advisory provided to business areas
• Must hold CISSP, CEH, ISO 27001 LA
• Provides end-to-end security and compliance services across the
• organization. Responsible for performing security and compliance risk
• assessments, enabling control implementation, and ensuring regulatory
• alignment (SOX, Trade Compliance).

Building a cleaner, smarter future takes all kinds of minds: the curious, the courageous, and the creative. We welcome people from all backgrounds and experiences.