Senior Cyber Risk Leader

ARHS; Warszawa; On-site; PLN 240,000 - 300,000; Full time

Job summary

ARHS in Poland seeks a senior cybersecurity risk management professional to develop and maintain the organisation's risk strategy. You will conduct risk assessments, identify threats to ICT systems, and design controls to keep risks at acceptable levels while supporting governance, compliance, and threat modelling across DevOps environments.

Excellent English communication and ability to guide executives in risk-informed decisions are essential, including contributing to Zero Trust architecture

Qualifications

• Minimum 9 years IT experience with at least 6 years in cybersecurity risk management, information security governance, or similar role.
• Master's degree in ICT-related field.
• At least 4 of the listed certifications (or equivalent) such as CISA, CISM, CRISC, CISSP, CCSP, GIAC as applicable.

Responsibilities

• Develop and maintain the organisation’s cybersecurity risk management strategy.
• Conduct cybersecurity risk assessments and analyses to identify threats, categorise assets, assess vulnerabilities, and recommend risk treatment options.
• Identify and assess cybersecurity-related threats and vulnerabilities of ICT systems and maintain awareness of the evolving threat landscape.
• Perform Business Impact Assessments and support cybersecurity risk-based decision making.
• Design, implement, monitor, and evaluate cybersecurity controls to ensure risks remain at acceptable levels.
• Implement and maintain cybersecurity risk management frameworks, methodologies, standards, and best practices.
• Support compliance with security, risk, governance, and regulatory requirements.

Skills

Cybersecurity risk management

Risk assessments

Threat modelling

Zero Trust Architecture

Security governance

Stakeholder management

Communication

Security controls

Education

Master's degree in ICT

Tools

ServiceNow GRC

Job description

ARHS in Poland seeks a senior cybersecurity risk management professional to develop and maintain the organisation's risk strategy. You will conduct risk assessments, identify threats to ICT systems, and design controls to keep risks at acceptable levels while supporting governance, compliance, and threat modelling across DevOps environments.

Excellent English communication and ability to guide executives in risk-informed decisions are essential, including contributing to Zero Trust architecture