Security Remediation Governance Architect

DCG; Łódź, Gdynia; On-site; PLN 180,000 - 260,000; Full time

Job summary

DCG is seeking a Security Remediation Governance Lead to guide remediation efforts, assess risk, and implement governance across security findings. The role emphasizes collaboration with remediation owners and the design of risk scoring models to prioritize critical vulnerabilities.

The candidate will leverage expertise in AI threats, DORA, OWASP, and Secure DevOps to drive timely, effective remediation and communicate progress to stakeholders in English.

Qualifications

• 3+ years hands-on security remediation experience.
• Expert knowledge of vulnerability scoring frameworks and risk assessment methodologies.
• Strong understanding of AI threats and governance implications.
• Experience with Secure DevOps, DORA, and OWASP.
• Ability to communicate results in business and technical English.

Responsibilities

• Identify remediation gaps and drive strategic resolution.
• Advise on remediation strategies aligned with best practices and regulatory expectations.
• Analyze security scan results and define actionable steps to reduce risk.
• Collaborate with remediation owners to ensure timely execution.
• Ensure findings are understood and progress tracked.
• Govern remediation outcomes with proactive governance and ownership.
• Assist design of risk scoring models for real-time prioritization.
• Prepare stakeholder presentations on progress, risks, and recommendations.

Skills

Security remediation

Remediation governance

Vulnerability scoring

Risk management

Exploratory data analysis

Statistical modelling

Cross-organizational collaboration

English communication

Tools

Python

Apache Airflow

Power Automate

Job description

DCG is seeking a Security Remediation Governance Lead to guide remediation efforts, assess risk, and implement governance across security findings. The role emphasizes collaboration with remediation owners and the design of risk scoring models to prioritize critical vulnerabilities.

The candidate will leverage expertise in AI threats, DORA, OWASP, and Secure DevOps to drive timely, effective remediation and communicate progress to stakeholders in English.