Security Compliance Strategist

Shiji Group; Katowice; On-site; PLN 120,000 - 180,000; Full time

Benefits offered by this job

Private medical care

Group life insurance

Multisport card

Job summary

Shiji Group, a global technology leader for hospitality, seeks a Security & Compliance professional to manage the security control framework, conduct risk assessments, and drive audits and policy development. You will work with a global security team to ensure compliance with ISO27001/27018, PCI DSS, GDPR and related standards.

The role requires 3+ years of experience in security/compliance, strong English, and project-management skills.

Qualifications

• At least 3 years of commercial experience in security/compliance roles.
• Experience with audits, risk analysis, security reviews and verification activities.
• Knowledge of security frameworks like ISO27001, ISO27018, PCI DSS, NIST CSF, SOC2, GDPR.
• Experience in creating/managing security documentation, control frameworks and policies.
• Experience in project management.
• Good spoken and written English.
• Self-motivated with strong attention to detail.

Responsibilities

• Manage security control framework and map standards to the framework.
• Input to security governance processes.
• Ensure compliance with security standards and regulations.
• Lead security processes: incident, continuity, vulnerability, change, physical security.
• Manage information security risk and monitor actions.
• Conduct security controls reviews, access reviews, compliance checks.
• Oversee internal audits and improve security posture.
• Maintain documentation for ISO27001/27018, SOC2, GDPR etc.
• Develop and update security policies and procedures.
• Identify new compliance requirements and advise stakeholders.
• Collaborate with security team to align programs with compliance.
• Assist with vendor risk assessments and access provisioning.

Skills

Security governance

Risk analysis

Internal audits

Policy development

Project management

English communication

Tools

ISO27001

ISO27018

PCI DSS

NIST CSF

SOC2

GDPR

Job description

Shiji Group, a global technology leader for hospitality, seeks a Security & Compliance professional to manage the security control framework, conduct risk assessments, and drive audits and policy development. You will work with a global security team to ensure compliance with ISO27001/27018, PCI DSS, GDPR and related standards.

The role requires 3+ years of experience in security/compliance, strong English, and project-management skills.