ISMS & Security Audit Lead (ISO27001/SOC2)

GlobalLogic Inc.; Kraków; On-site; PLN 120,000 - 180,000; Full time

Benefits offered by this job

Diverse projects

Learning & Development

DE&I emphasis

Career development

Comprehensive benefits

Relocation & rotation options

Job summary

GlobalLogic Inc. is seeking an experienced Information Security professional to lead ISMS audits and security assessments in Kraków.

The role focuses on ISO 27001/27002, SOC 2, and internal/external audit activities, ensuring regulatory compliance and strong security posture across the organization. The candidate will design and maintain an ISO 27001–based security framework, manage incidents, and communicate complex security concepts to technical and non-technical stakeholders.

Qualifications

• 5+ years of professional information security experience.
• Proven experience designing, implementing, and maintaining ISMS based on ISO 27001/27002.
• Proven experience leading internal and external ISMS audits.
• Proven expertise in security audits and providing actionable recommendations.
• Excellent communication and ability to explain security concepts to non-technical audiences.

Responsibilities

• Execute internal information security audits (ISO 27001, ITGC) to identify vulnerabilities and ensure regulatory compliance.
• Handle external information security audits (ISO 27001, SOC2 Type II).
• Manage the team’s participation in internal and external auditing activities.
• Develop and document processes and control policies around ISO 27001.
• Handle information security incidents.
• Manage risk assessments and develop mitigation strategies.
• Develop and enforce security policies, procedures, and guidelines to protect assets and data integrity.
• Oversee monitoring and analysis of security events and respond to incidents.
• Evaluate and recommend security technologies to enhance cybersecurity posture.
• Prepare and present detailed security reports and compliance metrics to management.

Skills

ISMS audits

ISO 27001/27002

SOC 2

Security audits

English proficiency

Job description

GlobalLogic Inc. is seeking an experienced Information Security professional to lead ISMS audits and security assessments in Kraków.

The role focuses on ISO 27001/27002, SOC 2, and internal/external audit activities, ensuring regulatory compliance and strong security posture across the organization. The candidate will design and maintain an ISO 27001–based security framework, manage incidents, and communicate complex security concepts to technical and non-technical stakeholders.