Lead Information Security & Risk Advisor

USTBC ABB Installation Products Inc.; Kraków; On-site; PLN 180,000 - 280,000; Full time

Job summary

ABB in Kraków is seeking an experienced IS Security professional to lead security measures across the organization, protect information assets, and ensure compliance with internal policies.

You will advise on security administration, guide SRC implementations across IT assets, and collaborate with stakeholders to strengthen resilience against threats while staying current with industry practices and technologies.

Qualifications

• Around 7 years of experience in Information Security Area
• Bachelor's or Master's in IT Discipline
• In-depth understanding and knowledge of security administration processes
• CISA and/or CISM and/or CRISC certified
• CISSP, ITIL Foundation will be preferred
• Fluent English

Responsibilities

• Catering to the IS security and compliance needs across the organization.
• Facilitating collaboration and implementing stakeholder engagement/communications plan.
• Giving advice to ensure compliance with ABB IS policies and procedures.
• Providing expert consulting and supporting the implementation of IS SRC requirements across IT assets and business areas.
• Ensuring that all requests for support are dealt with according to agreed procedures and providing guidance in defining access rights and privileges.
• Staying abreast of new and emerging IS technologies and industry practices in their own area of responsibility.
• Assessing ideas for efficiency improvement and value addition and deciding based on their technological, financial, and functional feasibilities.

Skills

Information security experience

Fluent English

Education

Bachelor's or Master's in IT

CISA/CISM/CRISC certifications

CISSP knowledge

ITIL Foundation

Job description

ABB in Kraków is seeking an experienced IS Security professional to lead security measures across the organization, protect information assets, and ensure compliance with internal policies.

You will advise on security administration, guide SRC implementations across IT assets, and collaborate with stakeholders to strengthen resilience against threats while staying current with industry practices and technologies.