Security Remediation Governance Lead

DCG; Łódź, Gdynia; On-site; PLN 180,000 - 260,000; Full time

Job summary

DCG is seeking a Security Remediation Governance Lead to guide remediation efforts, assess risk, and implement governance across security findings. The role emphasizes collaboration with remediation owners and the design of risk scoring models to prioritize critical vulnerabilities.

The candidate will leverage expertise in AI threats, DORA, OWASP, and Secure DevOps to drive timely, effective remediation and communicate progress to stakeholders in English.

Qualifications

• 3+ years hands-on security remediation experience.
• Expert knowledge of vulnerability scoring frameworks and risk assessment methodologies.
• Strong understanding of AI threats and governance implications.
• Experience with Secure DevOps, DORA, and OWASP.
• Ability to communicate results in business and technical English.

Responsibilities

• Identify remediation gaps and drive strategic resolution.
• Advise on remediation strategies aligned with best practices and regulatory expectations.
• Analyze security scan results and define actionable steps to reduce risk.
• Collaborate with remediation owners to ensure timely execution.
• Ensure findings are understood and progress tracked.
• Govern remediation outcomes with proactive governance and ownership.
• Assist design of risk scoring models for real-time prioritization.
• Prepare stakeholder presentations on progress, risks, and recommendations.

Skills

Security remediation

Remediation governance

Vulnerability scoring

Risk management

Exploratory data analysis

Statistical modelling

Cross-organizational collaboration

English communication

Tools

Python

Apache Airflow

Power Automate

Job description

As a recruitment company, DCG understands that every business is powered by experienced professionals. Our management style and partnership approach enable us to meet your needs and provide continuous support. Due to our ongoing growth and the large number of recruitment projects we undertake for our partners, we are currently looking for: Security Remediation Governance Lead

Responsibilities:

• Lead identification of remediation gaps and drive strategic resolution initiatives across the organisation
• Provide expert guidance on remediation strategies aligned with security best practices and regulatory expectations
• Analyse complex security scanning results and define actionable remediation steps to reduce risk exposure
• Collaborate with accountable and responsible remediation owners to ensure timely and effective execution
• Ensure security findings are clearly understood and remediation activities progress appropriately
• Drive remediation outcomes through proactive governance, autonomy, and ownership
• Contribute to the design of risk scoring models enabling near real-time, risk-based prioritization and faster remediation of critical vulnerabilities
• Prepare and deliver stakeholder presentations on remediation progress, risks, and strategic recommendations

Requirements:

• Strong experience in security findings assessment and remediation with 3+ years of hands‑on experience across security domains
• Expert‑level knowledge of vulnerability scoring frameworks, security risk assessment methodologies, and governance processes for severity, prioritization, and remediation timelines
• Deep understanding of modern AI threats and their impact on security posture
• Proven experience in problem management, Secure DevOps, DORA, and OWASP
• Advanced troubleshooting and conceptual problem‑solving skills related to remediation activities
• Ability to interpret and communicate results using exploratory data analysis and statistical modelling techniques
• Strong understanding of risk‑based approaches and risk management practices
• Proven experience in cross‑organizational collaboration and stakeholder negotiation
• Ability to communicate effectively in business and technical English, both written and spoken
• Hands‑on experience in automation using Python, Apache Airflow, and/or Power Automate
• Practical application of AI technologies in governance processes and automation workflows
• Ability to mentor team members and contribute to knowledge sharing across the security function