Senior Information Security Officer: ISMS & Regulatory Risk

Tradevest GmbH; Warszawa; On-site; PLN 180,000 - 280,000; Full time

Job summary

Tradevest GmbH in Warsaw is looking for an Information Security Officer to own the security strategy and protect our data, systems and the client trust across the group. The role emphasizes resilience against evolving threats and proactive collaboration with stakeholders.

You will coordinate security objectives with executive leadership, establish, operate and advance our ISMS using the group’s GRC software, and create clear guidelines.

Qualifications

• 3+ years of practical information security experience in a fast-growing company.
• Certifications such as CISA, CISM, or ISO 27001 Lead Auditor preferred.
• Strong knowledge of DORA, NIS2, and related regulatory requirements.

Responsibilities

• In collaboration with management, align security objectives with group strategy.
• Advise on information security issues and provide regular status reports.
• Establish, operate and develop the ISMS framework using our GRC software.
• Create and update security guidelines and procedures according to MaRisk, DORA and local regulations.
• Plan, coordinate and execute audit procedures per multi-year audit plan.
• Coordinate risks remediation and incident prevention measures.
• Record and coordinate handling of information security incidents and follow-up.
• Support risk analyses with process, information and risk owners.
• Assist in emergency tests and update the emergency manual with owners.
• Coordinate awareness and training on information security for target groups.
• Assess cybersecurity posture of ICT third-party providers and review certifications.
• Plan, coordinate and evaluate penetration testing and digital operational resilience testing under DORA.

Skills

Information security

Stakeholder collaboration

Auditing

Education

CISA / CISM / ISO 27001 Lead Auditor

Tools

GRC software

Job description

Tradevest GmbH in Warsaw is looking for an Information Security Officer to own the security strategy and protect our data, systems and the client trust across the group. The role emphasizes resilience against evolving threats and proactive collaboration with stakeholders.

You will coordinate security objectives with executive leadership, establish, operate and advance our ISMS using the group’s GRC software, and create clear guidelines.