Senior IT Security Governance & Compliance Specialist

Site; Warszawa; Hybrid; PLN 190,000 - 270,000; Full time

Benefits offered by this job

Real flexibility and balance

Remote-first work model

Global collaboration

AI-driven projects & upskilling

Career growth opportunities

Job summary

Site seeks a Senior IT Security Governance & Compliance Specialist to own compliance activities, support audit readiness, and run user access reviews across on‑prem and cloud environments. You’ll design scalable controls, assess ITGCs, and report risk metrics to stakeholders.

You’ll partner with IT, IAM, and security teams to close gaps and drive remediation in a timely fashion. Strong GRC background, hands‑on experience with frameworks (NIST, ISO 27001, COBIT), and excellent communication in

Qualifications

• 3–5+ years in Information Security, IT GRC, IT Audit or Cybersecurity.
• Hands‑on governance, risk, compliance, and audit activities incl. assessments and remediation.
• Solid knowledge of ITGCs and frameworks (NIST/ISO 27001/CIS/PCI DSS/COBIT).
• IAM and PAM concepts including RBAC and user lifecycle management.
• Understanding of enterprise IT environments and data flows.

Responsibilities

• Lead and execute user access reviews and recertifications.
• Run compliance activities: control assessments, evidence collection, audit prep, remediation tracking.
• Evaluate ITGCs and security controls against NIST/ISO/COBIT/PCI DSS.
• Review documentation, configurations, logs to identify compliance gaps.
• Partner with infrastructure, cloud, IAM, and security teams on remediation.
• Prepare compliance, risk, and governance reports for stakeholders.

Skills

IT GRC

IT Audit

Cybersecurity

IAM

PAM

NIST

ISO 27001

CIS Controls

PCI DSS

COBIT

Excel

English

Tools

Microsoft Entra ID

SailPoint

CyberArk

Oracle OCI

SIEM solutions

Vulnerability management tools

Job description

Team International is a global Tech consulting company and software development service provider. With more than 20 years of experience, global operations in Poland, the United States, Portugal, and Latin America, and over 1500 employees, we combine technology knowledge, an agile approach to addressing various business challenges, and business information, all while maintaining a customer-centric perspective.

About the Role

We are looking for a Senior IT Security Governance & Compliance Specialist to join our client’s information security team. You will own key compliance activities, support audit readiness, and help design and run the user access review process. This role suits someone with a strong GRC foundation who is comfortable working hands‑on with IT, identity, cloud, and security teams.

What You’ll Do

• Lead and execute user access reviews and recertifications, and help build a scalable, repeatable access review process.
• Run ongoing compliance activities, including control assessments, evidence collection, audit preparation, and remediation tracking.
• Evaluate IT General Controls (ITGCs) and security controls against frameworks such as NIST, ISO 27001, CIS Controls, PCI DSS, and COBIT.
• Review technical documentation, system configurations, audit logs, and access models to identify compliance gaps and risk exposure.
• Partner with infrastructure, application, cloud, IAM, and cybersecurity teams to assess risks and agree on practical remediation plans.
• Prepare compliance, risk, and governance reports for stakeholders.

Requirements

What You Bring

• 3–5+ years of experience in Information Security, IT GRC, IT Audit, Cybersecurity, or a related field.
• Hands‑on experience with governance, risk, compliance, and audit activities, including assessments, evidence collection, and remediation follow‑up.
• Solid knowledge of ITGCs and common security and compliance frameworks (NIST, ISO 27001, CIS, PCI DSS, COBIT).
• Working knowledge of IAM and PAM concepts, including role‑based access control, segregation of duties, and user lifecycle management.
• Understanding of enterprise IT environments: identity, cloud, operating systems, networking, databases, and enterprise applications, plus how architectures, integrations, and data flows affect risk.
• Strong analytical, documentation, and communication skills, with the ability to explain technical risk clearly to different audiences.
• Advanced Microsoft Excel and reporting skills.
• English proficiency for daily communication with a U.S.-based team.

Nice to Have

• Experience with Microsoft Entra ID, SailPoint, CyberArk, Oracle OCI, SIEM solutions, or vulnerability management tools.
• Previous experience designing or improving access review or recertification programs.
• Certifications such as CISA, CRISC, CGRC, ISO 27001 Lead Auditor/Implementer, or CompTIA Security+.

What We Offer

• Real flexibility. Real balance: Competitive PTO + strong health coverage so you can actually disconnect.
• Work that challenges you (in a good way): Global projects. Complex problems. Zero “maintenance‑only” roles.
• Build your AI edge: Access to AI‑driven projects, upskilling opportunities, and certifications that keep you ahead of the curve.
• A team you’ll actually learn from: Collaborate with top‑tier engineers across LATAM, Europe & the US.
• Remote‑first, no friction: Work where you perform best, with the structure and trust to deliver.
• Grow fast, not just stay busy: Exposure to modern tech, cross‑functional teams, and real career paths.