Senior Cyber Risk & Compliance Strategy Lead

EY; Katowice; On-site; PLN 210,000 - 270,000; Full time

Job summary

Jobtailor is seeking a senior cybersecurity professional based in Katowice to help EY Clients assess and optimize cyber resilience. You will contribute to risk management strategies, business continuity planning, and incident readiness while aligning with enterprise goals.

Your expertise in governance, audits, and third-party risk will support client journeys through complex cyber programs and policy enhancements. English proficiency is essential.

Qualifications

• Minimum 5 years of experience in Cybersecurity/IT with at least 2 years focused on Cybersecurity.
• Adherence to ISO27001, NIST or ISMS governance standards.
• Implementation of risk management plans and risk assessments.
• Audits or reviews of ISMS or IT controls.
• Experience in Third Party Risk Management (TPRM).
• Domain knowledge in governance, IT security, and enterprise risk.
• Strong interpersonal, teamwork, and engagement skills.
• Excellent English; other languages are a plus.
• Analytical, detail oriented, and able to work independently or in a team.
• Ability to develop and review information security policies and address gaps.

Responsibilities

• Help EY Clients evaluate effectiveness and efficiencies of cybersecurity and resiliency programs.
• Develop and implement risk management strategies and business continuity plans.
• Ensure the organization can respond effectively to incidents and disruptions.
• Identify deficiencies and deliver recommendations and guidelines to improve cyber resilience.

Skills

Cybersecurity

Risk management

IT governance

Audits

TPRM

Business continuity planning

Stakeholder management

Project management

Analytical thinking

English proficiency

Job description

Jobtailor is seeking a senior cybersecurity professional based in Katowice to help EY Clients assess and optimize cyber resilience. You will contribute to risk management strategies, business continuity planning, and incident readiness while aligning with enterprise goals.

Your expertise in governance, audits, and third-party risk will support client journeys through complex cyber programs and policy enhancements. English proficiency is essential.