Mid-Level Information Security Incident Manager – Data Breach Response

ITDS; Kraków; Hybrid; PLN 180,000 - 260,000; Full time

Job summary

ITDS is seeking a Senior Information Security Incident Manager in Kraków with a focus on leading global data breach responses and safeguarding critical data assets. The role requires coordinating cross-functional teams, preparing senior-management briefings, and driving improvements in cyber resilience within a major financial client environment.

The ideal candidate has 3+ years in incident management or analyst roles, strong communication in English and Polish, and a deep understanding of GDPR

Qualifications

• 3+ years in cybersecurity incident management or analyst roles.
• Strong problem-solving and investigative skills.
• Fluent in English and Polish; excellent communication.
• Experience in regulated industries, e.g., banking/finance.
• Knowledge of GDPR and data privacy tools.
• Understanding of OS platforms, log management, and cloud/big data analysis.

Responsibilities

• Lead global data breach responses ensuring timely mitigation.
• Coordinate multi-team actions during incident handling with stakeholders.
• Provide incident reports and decision-support to senior management.
• Collaborate with Data Protection Officers and Cybersecurity Leads for remediation.
• Follow procedures to analyze, escalate, and respond to breaches.
• Drive lessons learned and enhance cyber resilience and detection capabilities.
• Develop and refine incident playbooks and use cases.
• Improve security posture with IT and security teams.

Skills

Incident management

Cybersecurity

English

Polish

Stakeholder comms

Tools

SIEM

Cloud analytics

Big Data tools

Job description

Hook -

Empower cybersecurity resilience - lead critical data breach responses and safeguard global information assets.

Location & Work Model

Krakow-based opportunity with hybrid work model (up to 4 remote days per week).

As a Senior-Level Information Security Incident Manager, you will be working for our client, a leading financial institution, to enhance their data protection protocols and manage high-severity cyber incidents. You will play a vital role in defending critical assets and ensuring swift, efficient response to security threats, supporting the organization's digital trust and integrity.

Your main responsibilities

• Lead the response to data breach events globally, ensuring timely mitigation of risks and threats.
• Coordinate multi-team actions during incident handling, maintaining clear communication with stakeholders.
• Provide accurate, up-to-date incident reports and decision-support information to senior management.
• Build strong partnerships with Data Protection Officers, Cybersecurity Leads, Business Risk Managers, and other internal teams to facilitate incident remediation.
• Follow detailed processes and procedures to analyze, elevate, and respond to data security breaches effectively.
• Drive lessons learned sessions and implement improvements to cyber resilience and detection capabilities.
• Develop and refine playbooks and use cases to enhance incident detection and response processes.
• Collaborate with cybersecurity and IT teams to improve overall security posture and incident handling procedures.

You're ideal for this role if you have

• At least 3 years of experience in cybersecurity incident management or analyst roles.
• Strong problem-solving, investigative, and troubleshooting skills.
• Fluent in English and Polish, with excellent communication skills to convey complex topics clearly.
• Experience working in enterprise environments within regulated industries, especially banking or finance.
• In-depth understanding of GDPR regulations and data privacy tools.
• Knowledge of common OS platforms, log management, SIEM tools, and cloud/Big Data analysis solutions.
• Ability to make critical decisions swiftly, balancing risks and organizational priorities.

It is a strong plus if you have

• Experience with incident management in cloud environments or with advanced threat detection tools.
• Knowledge of security frameworks such as ISO 27001, NIST, or similar.

Language Required for the role

Fluent Polish and English (spoken and written).

Eligibility for the role

Only candidates with an existing legal right to work in the European Union will be considered for this role.