IT Risk & Cybersecurity Lead

Luxoft; Kraków; Vor Ort; PLN 180.000 - 280.000; Vollzeit

Benefits dieser Stelle

Laptop and monitor

Zusammenfassung

Luxoft is seeking an IT Risk and Controls Expert in Kraków to strengthen the organization''s cybersecurity programme. You will evaluate security controls, assess information security risks, and guide risk-based decision-making for continuous improvement.

Responsibilities include managing IS risks, conducting security assessments, and advising stakeholders on controls and remediation actions. The role emphasizes collaboration with technical and business teams, drive risk remediation discussions,

Qualifikationen

• Demonstrable experience in Information Security (IS), Cybersecurity, IT Risk Management, or a related field.

Aufgaben

• Cybersecurity: Manage cybersecurity-related activities, including the identification, assessment, and mitigation of information security (IS) risks.
• Security Assessments: Conduct security assessments of internal projects and third-party service providers to evaluate control effectiveness and compliance with security requirements.
• Security Consulting: Provide security advisory services to stakeholders, offering guidance on security controls, risk treatment options, and policy requirements in business-friendly language.
• Project Management: Coordinate and manage security-related projects and initiatives, ensuring timely delivery and alignment with cybersecurity objectives.
• Third-Party Risk Management: Drive discussions regarding identified risks, communicate potential business impacts, and provide guidance on appropriate remediation actions.

Kenntnisse

Information Security

Cybersecurity

IT Risk Mgmt

Cloud Security

Jobbeschreibung

Luxoft is seeking an IT Risk and Controls Expert in Kraków to strengthen the organization''s cybersecurity programme. You will evaluate security controls, assess information security risks, and guide risk-based decision-making for continuous improvement.

Responsibilities include managing IS risks, conducting security assessments, and advising stakeholders on controls and remediation actions. The role emphasizes collaboration with technical and business teams, drive risk remediation discussions,