Security Compliance Officer

Shiji Group; Katowice; On-site; PLN 120,000 - 180,000; Full time

Benefits offered by this job

Private medical care

Group life insurance

Multisport card

Job summary

Shiji Group, a global technology leader for hospitality, seeks a Security & Compliance professional to manage the security control framework, conduct risk assessments, and drive audits and policy development. You will work with a global security team to ensure compliance with ISO27001/27018, PCI DSS, GDPR and related standards.

The role requires 3+ years of experience in security/compliance, strong English, and project-management skills.

Qualifications

• At least 3 years of commercial experience in security/compliance roles.
• Experience with audits, risk analysis, security reviews and verification activities.
• Knowledge of security frameworks like ISO27001, ISO27018, PCI DSS, NIST CSF, SOC2, GDPR.
• Experience in creating/managing security documentation, control frameworks and policies.
• Experience in project management.
• Good spoken and written English.
• Self-motivated with strong attention to detail.

Responsibilities

• Manage security control framework and map standards to the framework.
• Input to security governance processes.
• Ensure compliance with security standards and regulations.
• Lead security processes: incident, continuity, vulnerability, change, physical security.
• Manage information security risk and monitor actions.
• Conduct security controls reviews, access reviews, compliance checks.
• Oversee internal audits and improve security posture.
• Maintain documentation for ISO27001/27018, SOC2, GDPR etc.
• Develop and update security policies and procedures.
• Identify new compliance requirements and advise stakeholders.
• Collaborate with security team to align programs with compliance.
• Assist with vendor risk assessments and access provisioning.

Skills

Security governance

Risk analysis

Internal audits

Policy development

Project management

English communication

Tools

ISO27001

ISO27018

PCI DSS

NIST CSF

SOC2

GDPR

Job description

Shiji is a global technology company dedicated to providing innovative solutions for the hospitality industry, ensuring seamless operations for hoteliers day and night.

Built on the Shiji Platform—the only truly global hotel technology platform—Shiji’s cloud-based portfolio includes Property Management System, Point-of-Sale, guest engagement, distribution, payments, and data intelligence solutions for over 91,000 hotels worldwide, including the largest chains.

The best hotels run on Shiji — day and night.

Responsibilities

• Manages security control framework, map standards and requirements to the framework.
• Provides input to the security governance processes.
• Ensures that the processes within the company are compliant with all relevant security frameworks, standards and regulations.
• Implementing and supervising security processes including among the others incident management, business continuity management, vulnerability management, change management, physical security etc.
• Manages information security risk process, analyses risks, provides input to the process and monitors the required actions recommended by the process.
• Conducting selected security controls, access and permission reviews, compliance checks etc.
• Manages and conducts the internal audits within the company, ensuring that the audits and results improve the security posture of the company but also answer the standards requirements.
• Manages operational documentation required by all relevant standards and regulations including ISO27001, ISO27018 standards, SOC2 reporting, GDPR and other personal data protection regulations etc.
• Manages security policies and procedures, creates them, updates, reviews and ensures they are effective and properly implemented across the whole company.
• Identify, research, and evaluate new compliance requirements and present them to relevant stakeholders
• Provides advisory regarding legal requirements in case of security aspects but also related to other business areas relevant for the company.
• Works together with security team members to ensure successful security programs align with compliance requirements.
• Assist with daily activities and functions of the security team such as assessing vendors for security risk and provisioning application access.

Requirements

• At least 3 years of commercial experience in the areas listed above or in a similar role.
• Skills in conducting internal audits, risks analysis, security reviews and other verification activities related to security frameworks and standards.
• Experience and knowledge of security frameworks, standards and regulations like ISO27001, 27018 & PCI DSS, NIST Cybersecurity Framework, SOC2, GDPR and others.
• Experience in creating and managing security documentation, security control frameworks, polices and procedures and tuning these policies to reflect business and security requirements.
• Experience in project management.
• Good spoken and written English.
• Self-motivation and attention to details.

Nice to have

• Technical understanding of the security solutions, endpoint protection etc.
• Understanding of the cloud environment and ability to map security requirements to the cloud solutions.
  

What Do We Offer?

• Private medical care, including a dental package, for you and your family
• Group life insurance for you and your partner
• Multisport card as part of the Worksmile package

Work & Growth

• 40 hours for professional development during work hours
• Access to platforms like: OpenUp, Pluralsight and GoodHabitz
• Worksmile cafeteria with 525 points per month