IT Risk Manager: Cybersecurity Strategy Lead

Amcor Limited; Łódź; On-site; PLN 260,000 - 380,000; Full time

Job summary

Amcor is seeking a seasoned Manager, IT Risk to lead risk identification, assessment, and governance across information assets and security programs. You will coordinate risk workshops, drive remediation, and support board-level risk reporting in a global, matrixed environment.

The role emphasizes collaboration with business and technology teams, development of risk metrics, and ongoing enhancement of Amcor’s cybersecurity maturity and resilience amid evolving threats.

Qualifications

• 12+ years of total professional experience, incl. 7+ years in IT/cyber risk mgmt, IT audit, or governance.
• Proven experience leading enterprise IT and cybersecurity risk activities.
• Bachelor’s degree in IT, Audit or related field; strong knowledge of risk concepts and regulatory requirements.
• Experience in a complex global, matrixed org with senior stakeholders.
• Certifications such as CRISC, CISA or ISO27001 LA preferred.
• Strong knowledge of risk mgmt principles, governance frameworks, and regulatory requirements.
• Ability to communicate business impact of IT/cyber risks clearly to leadership.
• Excellent communication, presentation, and facilitation skills.

Responsibilities

• Lead periodic IT and cybersecurity risk committee meetings; set agendas, prioritize risks, align stakeholders, present risks, and track actions.
• Develop and report IT risk metrics, KRIs, trends, and risk stats to IT leadership and governance bodies.
• Apply qualitative risk assessment methodologies to support strategic risk decisions.
• Oversee risk assessments for new technologies, services, projects, and third parties.
• Provide independent risk oversight and challenge to IT, cybersecurity, and business teams.
• Drive improvements to risk posture and remediation tracking across the organization.
• Advance the IT and cybersecurity risk management framework and reporting processes.
• Maintain strong relationships with stakeholders involved in IT and cybersecurity risk.

Skills

IT risk management

Cybersecurity risk

GRC

Stakeholder management

Communication skills

Risk assessment methods

Regulatory compliance

Executive reporting

Education

Bachelor's degree in IT, Audit or related field

Tools

CRISC

CISA

ISO27001 LA

Job description

Amcor is seeking a seasoned Manager, IT Risk to lead risk identification, assessment, and governance across information assets and security programs. You will coordinate risk workshops, drive remediation, and support board-level risk reporting in a global, matrixed environment.

The role emphasizes collaboration with business and technology teams, development of risk metrics, and ongoing enhancement of Amcor’s cybersecurity maturity and resilience amid evolving threats.