Security Compliance Engineer

Osprey Engineering Solutions Ltd; Zator; Presencial; PLN 120.000 - 190.000; Jornada completa

Descripción de la vacante

Osprey Engineering Solutions seeks a Security & Compliance Engineer to join the group IT Team. You will help ensure information security and compliance are documented and implemented globally, combining ISMS activities with hands-on security engineering in the Microsoft Entra environment.

You will work with global IT colleagues, the Cyber Defence Center, and business stakeholders to improve controls, manage incidents, and report KPIs across the organization.

Formación

• Hands-on IT security experience.
• M365/Entra administration knowledge.
• Understanding of ISO 27001 concepts: risk-based controls, policies, evidence, and audit readiness.

Responsabilidades

• Support and improve the ISMS, including compliance activities and audit preparation.
• Translate security requirements into practical technical controls and verify their effectiveness.
• Implement and operate core security controls in the Microsoft Entra environment, including MFA and Conditional Access.
• Coordinate security activities such as Cyber Defence Center investigations, vulnerability management, incident response, backup security, and restore-test evidence.
• Integrate security into IT operations, change/release processes, and service management, and report security posture using KPIs such as MFA coverage and patch status.

Conocimientos

IT security

IAM

M365/Entra

Endpoint security

Cloud security

ISO 27001

Risk management

Herramientas

M365/Entra admin tools

SIEM

Descripción del empleo

Osprey Engineering Solutions are currently hiring on behalf of a international company within the hydraulics industry. They are currently seeking a Security & Compliance Engineer to join their group IT Team.

In this role, you will help ensure that information security and compliance are not only documented but also implemented and operated globally. You will combine ISMS/compliance activities with hands-on security engineering, especially in the Microsoft / Entra environment. You will work closely with global IT colleagues, the Cyber Defence Center, and business stakeholders.

Responsibilities include:

• Support and continuously improve the ISMS, including compliance activities, audit preparation, evidence collection, risk tracking, and remediation follow-up.
• Translate security and compliance requirements into practical technical controls and verify their effectiveness.
• Implement and operate core security controls in the Microsoft / Entra environment, including MFA, Conditional Access, role-based access, privileged access practices, access reviews, endpoint security, and hardening.
• Coordinate operational security activities such as Cyber Defence Center investigations, vulnerability and patch management, incident response, backup/restore security, ransomware resilience, and restore-test evidence.
• Integrate security into IT operations, change/release processes, and service management, and report the security posture using relevant KPIs such as MFA coverage, device compliance, patch status, critical risks, and restore-test success.

Experience:

• Hands-on experience in IT security, M365/Entra administration, endpoint management, IT operations, or a comparable technical role.
• Good understanding of Microsoft security concepts, especially identity and access management, endpoint protection, and cloud security.
• Basic to solid understanding of ISO 27001 concepts such as risk-based controls, policies, evidence, and audit readiness.
• Technical knowledge in several areas such as IAM, endpoint security, secure access, vulnerability management, logging/SIEM, or backup/recovery.
• Proactive, structured, and pragmatic working style, with the ability to document clearly, communicate across IT and business, and follow topics through to closure.