Remote InfoSec Analyst: Security Ops & GRC

UST; Kraków; Hybrid; PLN 140,000 - 190,000; Full time

Job summary

UST in Krakow, Poland is seeking an experienced Information Security Analyst to join our Information & Cyber Security team, combining hands-on security operations and incident investigation with exposure to governance, risk and compliance (GRC).

This role handles escalated security cases, investigates suspicious activity, coordinates with users and technical teams to determine risk and drive incidents to resolution, while supporting third-party security assessments and security controls reviews.

Qualifications

• Experience in Information Security, Cyber Security Operations or Security Incident Management.
• Strong triage, investigation and analytical skills.
• Experience managing security incidents through investigation to resolution.
• Understanding of Identity & Access Management (IAM) and access governance.
• Exposure to GRC, third-party/supplier risk or security assurance.
• Familiarity with ISO 27001 and SOC 2.
• Experience with Microsoft security technologies or similar enterprise platforms.
• Strong documentation and audit-support skills.
• Clear communication to technical and non-technical stakeholders.
• Proactive ownership mindset.

Responsibilities

• Security Operations & Investigation: triage and manage escalated incidents.
• Analyse suspicious sign-ins, potentially compromised accounts, unusual locations, and data‑protection events.
• Use telemetry to distinguish threats from legitimate activity and false positives.
• Maintain investigation notes, evidence and case outcomes.
• Coordinate remediation and ensure incidents reach resolution.
• Engage with users, tech teams, customers and security providers to establish facts.
• Support GRC, access governance and security-control reviews.
• Manage third‑party assessments and supplier reassessments.
• Review SOC 2 reports, ISO 27001 certifications and Statements of Applicability.
• Assess supplier risk using RAG assessments and identify remediation needs.
• Support Access Package reviews, evidence gathering and management reporting.
• Track actions through to completion.
• Work with Microsoft security tech and other platforms to investigate events.
• Identify false positives and gaps; propose monitoring improvements.

Skills

InfoSec Operations

Incident Management

Triage & Investigation

IAM & Access Governance

GRC exposure

ISO 27001 familiarity

SOC 2 familiarity

Documentation & Audit

Tools

Microsoft Security Technologies

Job description

UST in Krakow, Poland is seeking an experienced Information Security Analyst to join our Information & Cyber Security team, combining hands-on security operations and incident investigation with exposure to governance, risk and compliance (GRC).

This role handles escalated security cases, investigates suspicious activity, coordinates with users and technical teams to determine risk and drive incidents to resolution, while supporting third-party security assessments and security controls reviews.