IT GRC & ISMS Analyst - Risk & Compliance

KK Group; Szczecin; On-site; PLN 100,000 - 160,000; Full time

Job summary

KK Group in Szczecin is seeking an IT GRC Analyst to manage governance, risk and compliance initiatives. The role focuses on maintaining the ISMS, assessing risks across IT and OT environments, and ensuring alignment with regulatory and internal requirements.

You will support secure operations, regulatory compliance, and ongoing improvements of the organization’s security governance framework. The candidate will work with stakeholders across IT and business units to embed security controls,

Qualifications

• Experience with IT governance, risk management, and compliance activities.
• Knowledge of IT and OT environments, networks, servers, and services.
• Familiarity with ISMS frameworks and internal audit practices.
• Understanding of regulatory and compliance requirements affecting information security.
• Strong documentation, coordination, and stakeholder communication skills.
• Familiarity with ISO2700X standard.

Responsibilities

• Provide governance, risk and compliance support across KK Group initiatives.
• Coordinate cross-functional stakeholders to deliver GRC-related projects on time.
• Identify, assess and manage risks across IT and OT networks, servers and services.
• Maintain risk assessments and risk treatment plans with technical and business teams.
• Support continuous risk monitoring and reporting.
• Contribute to development and improvement of systems from a GRC perspective.
• Ensure security, risk and compliance considerations are embedded in project lifecycles.
• Maintain ISMS, update policies and align with standards and regulations.
• Perform and support internal audits; document findings and remediation actions.

Skills

IT governance

Risk management

Compliance

ISMS

Regulatory requirements

Stakeholder communication

Documentation

Job description

KK Group in Szczecin is seeking an IT GRC Analyst to manage governance, risk and compliance initiatives. The role focuses on maintaining the ISMS, assessing risks across IT and OT environments, and ensuring alignment with regulatory and internal requirements.

You will support secure operations, regulatory compliance, and ongoing improvements of the organization’s security governance framework. The candidate will work with stakeholders across IT and business units to embed security controls,