Senior Cyber GRC & ISO 22301 Specialist

Arup; Kraków; On-site; PLN 180,000 - 280,000; Full time

Job summary

Arup in Kraków seeks a senior Cyber GRC professional to strengthen IT disaster recovery, risk assessments, and security awareness initiatives across our global teams. You will partner with regional digital groups to embed security-by-design and drive ISO 22301 compliance.

The role offers an opportunity to influence business resilience within an international, innovative organisation, with a focus on continuous learning and impact across clients and communities.

Qualifications

• Strong IT DR and ISO22301 compliance experience in a global tech environment.
• Experience in BIA, dependencies, and IT DR stakeholder engagement.
• Proven threat and risk assessment experience; capable of leading cyber awareness initiatives.

Responsibilities

• Develop, maintain, and test the organisation’s IT Disaster Recovery (ITDR) plans.
• Conduct regular risk assessments and impact analyses to identify critical systems, dependencies, and recovery priorities.
• Manage global cybersecurity awareness campaigns and training initiatives to strengthen security culture.
• Collaborate with regional digital teams to embed security-by-design principles into projects and products.
• Drive implementation and ongoing compliance with ISO 22301 standards, ensuring the organisation meets global BCM requirements.

Skills

IT DR

ISO22301

Threat & Risk Assessment

Security Awareness Leadership

Job description

Arup in Kraków seeks a senior Cyber GRC professional to strengthen IT disaster recovery, risk assessments, and security awareness initiatives across our global teams. You will partner with regional digital groups to embed security-by-design and drive ISO 22301 compliance.

The role offers an opportunity to influence business resilience within an international, innovative organisation, with a focus on continuous learning and impact across clients and communities.