It & Information Security Manager

WhyHireWrong?; Województwo mazowieckie; In loco; PLN 180.000 - 240.000; Tempo pieno

Vantaggi offerti da questo lavoro

Betriebliche Sicherheitsprogramme

Descrizione del lavoro

WhyHireWrong? poszukuje doświadczonego IT i Information Security Managera, który wesprze operacje IT na co dzień i poprowadzi praktyki bezpieczeństwa w kilku międzynarodowych lokalizacjach.

Będziesz łączyć wsparcie techniczne z zarządzaniem ryzykiem i koordynacją incydentów, współpracując z zespołami po polsku i po angielsku. Twoje zadania obejmą tworzenie polityk bezpieczeństwa, monitorowanie zgodności, komunikację ze interesariuszami i prowadzenie audytów – z naciskiem na praktyczne

Competenze

• At least 6 years of experience in IT, IT security, or related field, ideally in an international or multi-site environment.
• Practical knowledge of Microsoft 365, Windows environments, and common IT architectures.
• Understanding of information security standards and frameworks such as ISO 27001, ISO 27005, NIST, and GDPR.
• Experience with security risk management and incident management processes.
• Experience working with ticketing systems and IT service management practices.
• Ability to explain security requirements clearly to non-technical stakeholders and balance security with business needs.
• Professional working proficiency in Polish and English.

Mansioni

• Resolve IT incidents and service requests, maintaining clear communication with users.
• Manage user accounts, access permissions, end-user devices, and IT asset records.
• Support local business applications, infrastructure, and basic network operations.
• Implement and monitor information security policies across multiple sites.
• Assess security risks, vulnerabilities, and threats; propose practical prevention and remediation actions.
• Act as a local point of contact for security incidents and coordinate response with central security teams.
• Review and approve privileged access requests using least-privilege principles.
• Coordinate internal and external security audits.
• Run security awareness activities and adapt materials for different audiences and languages.
• Maintain technical documentation, procedures, and user guides.
• Manage a local IT budget, including security-related spending, forecasting, and cost tracking.
• Report on security status, incidents, risks, and key metrics to senior security leadership.

Conoscenze

IT security

IT operations

Information security management

Risk management

Incident management

Stakeholder communication

Polish language

English language

Strumenti

Microsoft 365

Windows Environments

Ticketing systems

Descrizione del lavoro

O projekcie:

This recruitment process is conducted on behalf of our client. Keep international teams running securely: lead hands‑on IT support, information security, and risk management across multiple sites, partnering with colleagues in Polish and English.We are looking for an experienced IT and Information Security Manager to support day-to-day technology operations while leading information security practices across multiple international locations. You will combine hands‑on IT support with security governance, risk management, incident coordination, and stakeholder communication.

Wymagania:

• At least 6 years of experience in IT, IT security, or a related field, ideally in an international or multi-site environment.
• Practical knowledge of Microsoft 365, Windows environments, and common IT architectures.
• Understanding of information security standards and frameworks such as ISO 27001, ISO 27005, NIST, and GDPR.
• Experience with security risk management and incident management processes.
• Experience working with ticketing systems and IT service management practices.
• Ability to explain security requirements clearly to non-technical stakeholders and balance security with business needs.
• Professional working proficiency in Polish and English.

Codzienne zadania:

• Resolve IT incidents and service requests, maintaining clear communication with users.
• Manage user accounts, access permissions, end-user devices, and IT asset records.
• Support local business applications, infrastructure, and basic network operations.
• Implement and monitor information security policies across multiple sites.
• Assess security risks, vulnerabilities, and threats; propose practical prevention and remediation actions.
• Act as a local point of contact for security incidents and coordinate response with central security teams.
• Review and approve privileged access requests using least-privilege principles.
• Coordinate internal and external security audits.
• Run security awareness activities and adapt materials for different audiences and languages.
• Maintain technical documentation, procedures, and user guides.
• Manage a local IT budget, including security-related spending, forecasting, and cost tracking.
• Report on security status, incidents, risks, and key metrics to senior security leadership.