Senior IT Security GRC & Access Governance Lead (Remote)

Site; Warszawa; Híbrido; PLN 190 000 - 270 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Real flexibility and balance

Remote-first work model

Global collaboration

AI-driven projects & upskilling

Career growth opportunities

Resumo da oferta

Site seeks a Senior IT Security Governance & Compliance Specialist to own compliance activities, support audit readiness, and run user access reviews across on‑prem and cloud environments. You’ll design scalable controls, assess ITGCs, and report risk metrics to stakeholders.

You’ll partner with IT, IAM, and security teams to close gaps and drive remediation in a timely fashion. Strong GRC background, hands‑on experience with frameworks (NIST, ISO 27001, COBIT), and excellent communication in

Qualificações

• 3–5+ years in Information Security, IT GRC, IT Audit or Cybersecurity.
• Hands‑on governance, risk, compliance, and audit activities incl. assessments and remediation.
• Solid knowledge of ITGCs and frameworks (NIST/ISO 27001/CIS/PCI DSS/COBIT).
• IAM and PAM concepts including RBAC and user lifecycle management.
• Understanding of enterprise IT environments and data flows.

Responsabilidades

• Lead and execute user access reviews and recertifications.
• Run compliance activities: control assessments, evidence collection, audit prep, remediation tracking.
• Evaluate ITGCs and security controls against NIST/ISO/COBIT/PCI DSS.
• Review documentation, configurations, logs to identify compliance gaps.
• Partner with infrastructure, cloud, IAM, and security teams on remediation.
• Prepare compliance, risk, and governance reports for stakeholders.

Conhecimentos

IT GRC

IT Audit

Cybersecurity

IAM

PAM

NIST

ISO 27001

CIS Controls

PCI DSS

COBIT

Excel

English

Ferramentas

Microsoft Entra ID

SailPoint

CyberArk

Oracle OCI

SIEM solutions

Vulnerability management tools

Descrição da oferta de emprego

Site seeks a Senior IT Security Governance & Compliance Specialist to own compliance activities, support audit readiness, and run user access reviews across on‑prem and cloud environments. You’ll design scalable controls, assess ITGCs, and report risk metrics to stakeholders.

You’ll partner with IT, IAM, and security teams to close gaps and drive remediation in a timely fashion. Strong GRC background, hands‑on experience with frameworks (NIST, ISO 27001, COBIT), and excellent communication in