Senior Cloud Security Controls Specialist – Risk and Compliance

ITDS; Kraków; Hybrid; PLN 180,000 - 280,000; Full time

Job summary

ITDS in Kraków offers a Senior Cloud Security Controls Specialist – Risk and Compliance role with hybrid work. You will govern cloud cybersecurity controls, collaborate with risk and control teams, and drive improvements across stakeholders.

The position emphasizes risk management, metrics, and strong writing in English. The candidate should have 5+ years in IT risk or cybersecurity with cloud focus, plus experience with Jira, Confluence and common office tools.

Qualifications

• 5+ years in IT risk, controls or cybersecurity with a cloud focus.
• Expertise in Risk and Control Management and clear communication to stakeholders.
• Knowledge of KCIs, KRIs and KPIs in cybersecurity metrics.
• Proven technical background in managing technology risks and controls.
• Strong technical writing skills and fluent written English.
• Experience with Excel, PowerPoint, Word, Outlook, Jira and Confluence.

Responsibilities

• Oversee governance of cloud cybersecurity controls and align with frameworks.
• Collaborate with Control Owners, Security Architecture, 2LoD and Chief Control Office.
• Coordinate multiple stakeholders to enhance cloud control design and operation.
• Facilitate and administrate meetings, forums and maintain procedures.
• Maintain the Operating Model and Confluence documentation for the team.
• Manage Epics, Stories and Tasks in JIRA to support goals.
• Define business requirements and participate in User Acceptance Testing.

Skills

Cloud security

IT risk & controls

Risk & control management

Stakeholder communication

Technical writing

Prioritization

Tools

Jira

Confluence

Excel

PowerPoint

Word

Outlook

Job description

Unleash the Future of Cloud Security — Drive Innovation in Cybersecurity Controls! Kraków-based opportunity with hybrid work model. As a Senior Cloud Security Controls Specialist – Risk and Compliance, you will be working for our client, a leading organization in the cybersecurity industry committed to empowering organizations to protect their cloud environments. You will help shape the security landscape by ensuring comprehensive governance and effective controls on cloud platforms, contributing to safer digital ecosystems and enabling clients to operate with confidence.

Your main responsibilities:

• Collaborate with Control Owners, Security Architecture, 2LoD (Risk Management), and Chief Control Office to ensure alignment and facilitate projects within the Cloud Security Controls Team.
• Oversee governance of Cybersecurity controls on Cloud, ensuring their measurement aligns with HSBC’s frameworks and industry best practices.
• Coordinate multiple stakeholders to implement enhancements to how Cybersecurity risks and technical controls are designed and operated in Cloud environments.
• Facilitate and administrate meetings, forums, and operate forums effectively.
• Maintain and update the Team’s Operating Model, procedures, and Confluence documentation.
• Manage Epics, Stories, and Tasks within JIRA to support team goals.
• Define business requirements and participate in User Acceptance Tests (UAT) for future developments.

You're ideal for this role if you have:

• 5+ years of experience in IT risk, controls, or cybersecurity, with a strong focus on cloud security.
• Expertise in Risk and Control Management, with the ability to communicate complex IT concepts effectively to diverse stakeholders.
• Generalist knowledge of Cybersecurity, with understanding of metrics such as KCIs, KRIs, and KPIs.
• Proven technical background with experience in managing technology risks and controls.
• Strong technical writing skills and highly proficient in written English.
• Experience with Excel, PowerPoint, Word, Outlook, Jira, and Confluence.
• Ability to respond to ad-hoc tasks swiftly while maintaining high-quality outputs.
• Capable of managing conflicting priorities efficiently.

It is a strong plus if you have:

• Experience with automation in report creation or data processing.
• Familiarity with GRC Tools and ServiceNow.
• Background in Business/Data analysis.
• Project/Programme Management experience.

Language required for the role:

• Fluent English command, both written and spoken.

Eligibility for the role:

• Only candidates with an existing legal right to work in the European Union will be considered for this role.

#MAKEYourCareerBETTER