IT GRC Analyst

KK Group; Szczecin; On-site; PLN 100,000 - 160,000; Full time

Job summary

KK Group in Szczecin is seeking an IT GRC Analyst to manage governance, risk and compliance initiatives. The role focuses on maintaining the ISMS, assessing risks across IT and OT environments, and ensuring alignment with regulatory and internal requirements.

You will support secure operations, regulatory compliance, and ongoing improvements of the organization’s security governance framework. The candidate will work with stakeholders across IT and business units to embed security controls,

Qualifications

• Experience with IT governance, risk management, and compliance activities.
• Knowledge of IT and OT environments, networks, servers, and services.
• Familiarity with ISMS frameworks and internal audit practices.
• Understanding of regulatory and compliance requirements affecting information security.
• Strong documentation, coordination, and stakeholder communication skills.
• Familiarity with ISO2700X standard.

Responsibilities

• Provide governance, risk and compliance support across KK Group initiatives.
• Coordinate cross-functional stakeholders to deliver GRC-related projects on time.
• Identify, assess and manage risks across IT and OT networks, servers and services.
• Maintain risk assessments and risk treatment plans with technical and business teams.
• Support continuous risk monitoring and reporting.
• Contribute to development and improvement of systems from a GRC perspective.
• Ensure security, risk and compliance considerations are embedded in project lifecycles.
• Maintain ISMS, update policies and align with standards and regulations.
• Perform and support internal audits; document findings and remediation actions.

Skills

IT governance

Risk management

Compliance

ISMS

Regulatory requirements

Stakeholder communication

Documentation

Job description

In our factory in Szczecin, we are looking for an IT GRC Analyst (Governance, Risk and Compliance). This role focuses on managing security-related projects, maintaining the Information Security Management System (ISMS), assessing risks across networks, servers, and services, and ensuring alignment with regulatory and internal requirements. The position plays a key role in supporting secure operations, regulatory compliance, and the continuous improvement of the organisation’s security governance framework.

Responsibilities

Governance & Project Management

• Provide project management support across KK for security, risk, and compliance initiatives.
• Coordinate cross-functional stakeholders to ensure timely delivery of GRC-related projects. Support integration of governance and risk requirements into ongoing and new initiatives.
• Identify, assess, and manage risks related to networks, servers, and services across both IT and OT environments.
• Maintain risk assessments and risk treatment plans in collaboration with technical and business stakeholders.
• Support continuous risk monitoring and reporting.

Systems Development & Change Support

• Contribute to development and improvement of existing systems from a GRC perspective.
• Support governance and risk requirements in new projects and system implementations.
• Ensure security, risk, and compliance considerations are embedded throughout project lifecycles.

Information Security Management System (ISMS)

• Act as a key contributor and responsible party for maintaining the Information Security Management System (ISMS).
• Support definition, maintenance, and improvement of security policies, standards, and procedures.
• Ensure alignment of the ISMS with applicable standards and regulatory requirements.

Internal Audit & Compliance Assurance Plan

• Perform, and support internal audits related to information security and compliance.
• Document audit findings and track remediation actions.

Our Requirements:

• Experience with IT governance, risk management, and compliance activities.
• Knowledge of IT and OT environments, including networks, servers, and services.
• Familiarity with ISMS frameworks and internal audit practices.
• Understanding of regulatory and compliance requirements affecting information security.
• Strong documentation, coordination, and stakeholder communication skills.
• Familiarity with the ISO2700X standard