ISMS & Security Audit Lead

GlobalLogic; Kraków; On-site; PLN 170,000 - 210,000; Full time

Benefits offered by this job

Diversity & Inclusion

Career development

Relocation options

Flexible opportunities

Job summary

GlobalLogic Kraków is seeking a Security Risk & Compliance expert to lead ISO 27001/27002 ISMS design, implementation and audits, and to manage SOC 2 assessments. You will drive audit planning, reporting, and remediation, collaborating with stakeholders, and communicating security concepts to both technical and non-technical teams; fluent English is required and 5+ years of experience.

Join a global digital engineering partner that values diversity and professional growth, with opportunities to

Qualifications

• Proven experience designing, implementing, and maintaining ISMS (ISO 27001/27002).
• Proven SOC 2 compliance assessments experience.
• Experience conducting comprehensive ISMS audits and reporting.
• Lead audits and provide actionable security improvements.
• Excellent communication skills for internal and external stakeholders.
• Fluent English and ability to explain security concepts clearly.
• 5+ years of professional information security experience.

Responsibilities

• Execute internal information security audits (ISO 27001, ITGC) to identify vulnerabilities and ensure regulatory compliance.
• Handle external information security audits (ISO 27001, SOC2 Type II).
• Manage the team’s participation in auditing activities.
• Develop and document processes and control policies around ISO 27001.
• Handle information security incidents and response.
• Manage risk assessments and mitigation strategies for security risks.
• Develop and enforce security policies, procedures, and guidelines.
• Oversee monitoring of security events and incident response.
• Evaluate security technologies and present reports to management.

Skills

ISMS ISO 27001/27002

SOC 2 compliance

ISMS audits

Security audits

Communication

English proficiency

5+ years experience

Education

Relevant degree

Job description

GlobalLogic Kraków is seeking a Security Risk & Compliance expert to lead ISO 27001/27002 ISMS design, implementation and audits, and to manage SOC 2 assessments. You will drive audit planning, reporting, and remediation, collaborating with stakeholders, and communicating security concepts to both technical and non-technical teams; fluent English is required and 5+ years of experience.

Join a global digital engineering partner that values diversity and professional growth, with opportunities to