IS SRC Senior Consultant

ABB; Kraków; On-site; PLN 180,000 - 300,000; Full time

Job summary

ABB in Kraków seeks a senior Information Security, Risk and Compliance professional to lead security risk assessments and govern compliance programs across the organization.

You will advise businesses on risk and control implementations, own deliverables, and collaborate with global teams to strengthen security posture and audit readiness.

Qualifications

• 8+ years in security and compliance roles.

Responsibilities

• Lead security and regulatory compliance assessments with business stakeholders.

Skills

Security governance

Risk assessments

Regulatory compliance

Advisory to business

Stakeholder collaboration

Education

Bachelor's degree in IT / Cybersecurity

Tools

CISSP

CISA

CCSP

CRISC

ISO 27001 LA

CISM

ITIL 4/5

Job description

At ABB, we help industries run leaner and cleaner - and every person here makes that happen. You'll be empowered to lead, supported to grow, and proud of the impact we create together. Join us and help run what runs the world.

This Position reports to: IS Department Manager for Compliance and Risk Advisory

Job role :

The Information Security, Risk, and Compliance team is responsible for protecting the organization's information assets by implementing and maintaining effective security, risk management, and compliance practices. The team works closely with business and technology stakeholders to identify, assess, and mitigate cybersecurity risks while ensuring adherence to organizational policies, industry standards, and regulatory requirements. Through security assessments, compliance reviews, governance activities, and continuous monitoring, the team helps strengthen the organization's security posture and supports secure business operations. Additionally, the team drives continuous improvement initiatives, maintains audit readiness, and collaborates across global and cross-functional teams to safeguard critical systems, data, and infrastructure against evolving cyber threats.

The work model for the role is:

• Lead security and regulatory compliance assessments in partnership with business stakeholders to identify, evaluate, and mitigate risks while ensuring alignment with organizational policies, industry standards, and applicable regulations.
• Provide subject matter expertise in security governance, risk management, and compliance frameworks, enabling consistent assessment outcomes and informed risk-based decision-making.
• Own the delivery of security and compliance objectives, service targets, and key deliverables, ensuring timely execution and high-quality results across assigned workstreams.
• Establish and maintain comprehensive assessment documentation, findings, control evidence, and reports to support audits, assurance activities, and regulatory requirements.
• Drive continuous improvement initiatives by enhancing security and compliance processes, controls, methodologies, and tools to strengthen organizational resilience and operational efficiency.
• Collaborate with global and cross-functional teams to deliver consistent governance, risk, and compliance services, manage enterprise security risks, and contribute expert guidance to strategic programs and initiatives.

Qualifications for the Role :

• 8+ years in security and compliance roles
• Bachelor's degree in IT / Cybersecurity or similar
• Influence on security and compliance risk assessments and advisory provided to business areas
• CISSP, CISA, CCSP, CRISC, ISO 27k LA, CISM, ITIL 4/5
• Provides end-to-end security and compliance services across the
• organization. Responsible for performing security and compliance risk
• assessments, enabling control implementation, and ensuring regulatory
• alignment (SOX, Trade Compliance).

Building a cleaner, smarter future takes all kinds of minds: the curious, the courageous, and the creative. We welcome people from all backgrounds and experiences.