Senior Cybersecurity Risk & Compliance Consultant

Jobtailor; Katowice; On-site; PLN 210,000 - 270,000; Full time

Job summary

Jobtailor is seeking a senior cybersecurity professional based in Katowice to help EY Clients assess and optimize cyber resilience. You will contribute to risk management strategies, business continuity planning, and incident readiness while aligning with enterprise goals.

Your expertise in governance, audits, and third-party risk will support client journeys through complex cyber programs and policy enhancements. English proficiency is essential.

Qualifications

• Minimum 5 years of experience in Cybersecurity/IT with at least 2 years focused on Cybersecurity.
• Adherence to ISO27001, NIST or ISMS governance standards.
• Implementation of risk management plans and risk assessments.
• Audits or reviews of ISMS or IT controls.
• Experience in Third Party Risk Management (TPRM).
• Domain knowledge in governance, IT security, and enterprise risk.
• Strong interpersonal, teamwork, and engagement skills.
• Excellent English; other languages are a plus.
• Analytical, detail oriented, and able to work independently or in a team.
• Ability to develop and review information security policies and address gaps.

Responsibilities

• Help EY Clients evaluate effectiveness and efficiencies of cybersecurity and resiliency programs.
• Develop and implement risk management strategies and business continuity plans.
• Ensure the organization can respond effectively to incidents and disruptions.
• Identify deficiencies and deliver recommendations and guidelines to improve cyber resilience.

Skills

Cybersecurity

Risk management

IT governance

Audits

TPRM

Business continuity planning

Stakeholder management

Project management

Analytical thinking

English proficiency

Job description

Responsibilities

• Help EY Clients to evaluate the effectiveness and efficiencies of their cybersecurity and resiliency programs in the context of the business growth and operations strategies.
• Play a crucial role in the development and implementation of risk management strategies and business continuity plans.
• Ensure that the organization is prepared to respond effectively to incidents and disruptions.
• Identify deficiencies and deliver recommendations along with guidelines to improve cyber resilience.

Requirements

• Minimum 5 years of experience in the field of Cybersecurity and/or Information Technology with minimum two years focusing on Cybersecurity field.
• Assuring the adherence to regulations, norms and standards such as ISO27001, NIST or any other ISMS governance systems.
• Implementation of risk management plans, performing risk assessments or business continuity program assessments.
• Performing audits or reviews of ISMS systems and/or IT general controls.
• Experience in Third Party Risk Management (TPRM).
• Domain knowledge in Cybersecurity, including governance, IT infrastructure security and risk management, cyber program assessments including cyber transformation and enterprise resilience.
• Demonstrate excellent interpersonal skills, inspire teamwork and responsibility with engagement team members.
• Excellent command of the English language, other language would be an asset.
• Analytical and problem-solving ability, ability to work effectively as a team member or as individual contributor, observant with an eye for detail.
• Ability to critically develop and review Information Security policies to tackle/identify controls gaps and weaknesses.
• Ability to liaise with stakeholders and strong project management skills.
• Effectively communicate complex cybersecurity risks and technical information to management, enabling informed decision-making and strategic guidance.