Senior Product Specialist / Product Security Engineer | C

Inetum; Warszawa; Hybrid; PLN 180,000 - 240,000; Full time

Benefits offered by this job

Hybrid work model

Training and certifications funded

Charity and well-being initiatives

Job summary

Inetum Polska is seeking a Senior Product Specialist / Product Security Engineer to develop and maintain a central catalog of security controls. The role focuses on harmonizing requirements from standards like NIST, IEC 62443, and AI Security, with collaboration across Product Security, Architecture, and Compliance teams.

The candidate will map controls, ensure traceability, and drive automation initiatives including Excel VBA tooling. Strong English and stakeholder management are essential.

Qualifications

• Experience in analyzing and defining security controls.
• Knowledge of NIST 800-53 and IEC 62443.
• Security Requirements Engineering.
• Security Controls Mapping / Framework Mapping.
• Security Compliance / Regulatory Compliance.
• Ability to analyze and harmonize security requirements from multiple sources.
• Experience in creating documentation and requirement catalogs.
• Very good English (C1).
• Independence and ability to work with multiple stakeholders.

Responsibilities

• Analyze and compare security requirements from various standards and regulations.
• Create and develop a central Security Controls Catalog.
• Map and harmonize controls across NIST, IEC 62443, and AI Security.
• Identify stringent requirements and translate them into common controls.
• Ensure full traceability between source requirements and catalog controls.
• Collaborate with Product Security, Architecture, and Compliance teams.
• Develop a process for maintaining and updating the catalog.
• Support process automation, e.g., mapping and reporting with Excel VBA.

Skills

Security controls analysis

NIST 800-53

IEC 62443

Security Requirements Eng

Controls mapping

Regulatory compliance

Documentation skills

English proficiency C1

Stakeholder management

Tools

Excel VBA

Job description

Senior Product Specialist / Product Security Engineer | C

• Full-time

Inetum Polska is part of the global Inetum Group and plays a key role in driving the digital transformation of businesses and public institutions. Operating in cities such as Warsaw, Poznan, Katowice, Lublin, Rzeszow the company offers a wide range of IT services. Inetum Polska actively supports employee development by fully funding training, certifications, and participation in technology conferences. Additionally, the company is involved in local social initiatives, such as charitable projects and promoting an active lifestyle. It prides itself on fostering a diverse and inclusive work environment, ensuring equal opportunities for all.

Globally, Inetum operates in 19 countries and employs over 28,000 professionals. The company focuses on four key areas:

• Consulting (Inetum Consulting): Strategic advisory services that help organizations define and implement innovative solutions.
• Infrastructure and Application Management (Inetum Technologies): Designing and managing IT systems tailored to clients’ individual needs.
• Software Implementation (Inetum Solutions): Deploying partner solutions from industry leaders like Microsoft, SAP, Salesforce, and ServiceNow.

With strategic partnerships with major technology giants, including Microsoft, SAP, Salesforce, and ServiceNow, Inetum delivers advanced technological solutions tailored to customer requirements. In 2023, Inetum reported revenues of €2.5 billion, underscoring its strong position in the digital services market.

Inetum distinguishes itself by offering a comprehensive range of benefits that meet the diverse needs of employees, providing flexibility, support and commitment. Here's what makes working at Inetum unique:

Flexible and hybrid work:

• Hybrid work model, allowing employees to divide their time between home and modern offices in key Polish cities.
• A cafeteria system that allows employees to personalize benefits by choosing from a variety of options.

Community and Well-Being:

• Dedicated team-building budget for online and on-site team events.
• Opportunities to participate in charitable initiatives and local sports programs.
• A supportive and inclusive work culture with an emphasis on diversity and mutual respect.

We are looking for someone to join our Product Security project and be responsible for developing and maintaining a central catalog of security controls.

The project focuses on analyzing, organizing, and harmonizing security requirements derived from various standards, frameworks, and regulations. A key aspect of the role will be mapping requirements and defining a common set of security controls that will standardize the approach to Product Security within the organization.

In this role, You will work with standards and frameworks such as NIST, IEC 62443, and AI Security, and collaborate with experts in Product Security, Architecture, and Compliance.

Your responsibilities:

• analyzing and comparing security requirements derived from various standards, frameworks, and regulations,
• creating and developing a central Security Controls Catalog,
• mapping and harmonizing security controls across different frameworks, including NIST, IEC 62443, and AI Security,
• identifying the most stringent requirements and translating them into a common set of security controls,
• ensuring full traceability between source requirements and the controls in the catalog,
• collaborating with experts and teams in Product Security, Architecture, and Compliance teams,
• developing a process for managing, maintaining, and updating the catalog,
• supporting process automation by creating a solution that facilitates mapping and reporting, e.g., using Excel VBA.

Must have requirements:

• Experience in analyzing and defining security controls
• Knowledge of NIST 800-53 and IEC 62443
• Security Requirements Engineering
• Security Controls Mapping / Framework Mapping
• Security Compliance / Regulatory Compliance
• Ability to analyze and harmonize security requirements from multiple sources
• Experience in creating documentation and requirement catalogs
• Very good English (C1)
• Independence and ability to work with multiple stakeholders

Nice to have requirements:

• AI Security
• NIST AI RMF
• Cyber Resilience Act (CRA)
• Experience in Medical Device Security
• Experience in Product Security Governance
• Traceability Management
• Technical Writing
• Remote or hybrid workfrom one of our officein Warsaw, Poznań,Lublin, Katowice or Rzeszów.
• Proficiency in Polish and English at the C1level is essential.
• We hereby inform you that Inetum Polska sp. z o.o. has implemented an internal reporting (whistleblowing) procedure. The content of the procedure and the possibility to submit an internal report are available at: https://inetum.whispli.com/speakup?locale=pl

By clicking the link above or any third-party link within this posting, you are leaving this site and going to a third-party website where the third-party website's terms and privacy policy apply