Senior Security Engineer

Billennium; Wrocław; Hybrid; PLN 180,000 - 280,000; Full time

Benefits offered by this job

Udemy for Business

Private medical care

Multisport card

Veterinary package

Language lessons

Shopping vouchers

Remote/hybrid work options

Job summary

Billennium is seeking a Senior Security Engineer for a global automotive client. You will lead third‑party security assessments, review supplier documentation, and translate findings into risk-based decisions.

This role involves collaboration with external suppliers and internal teams, supporting governance and security programs across enterprise environments. The candidate should have strong English communication, deep cybersecurity knowledge, and hands-on experience with TPRM, AI governance

Qualifications

• 5+ years of professional experience in cybersecurity, information security, IT risk management or related areas.
• 3+ years of hands-on experience performing third-party security assessments, supplier security reviews, technology risk assessments or similar activities.
• Demonstrated experience analyzing technical and security documentation and translating findings into actionable risk decisions.
• Experience working in large enterprise environments with multiple stakeholders and governance processes.
• Experience in collaborating with external suppliers and managing security-related discussions and follow-up activities.
• Strong understanding of cybersecurity principles and risk management practices.
• Practical knowledge of Third-Party Risk Management (TPRM), supply chain security and vendor risk assessment methodologies.
• Experience assessing security controls against recognized frameworks and standards, including: ISO 2700, NIST Cybersecurity Framework, SOC 2, NIS2, DORA, CIS Controls
• Understanding of AI governance, AI-related risks and regulatory requirements such as the EU AI Act.
• Experience working with internal corporate security policies, standards and compliance requirements.
• Strong analytical, problem-solving and critical-thinking skills.
• Excellent written and verbal communication skills in English.

Responsibilities

• Perform security risk assessments of third-party suppliers, products and services, including SaaS solutions, COTS applications, cloud services, hardware and OT-related solutions.
• Review supplier responses, technical documentation, security reports and supporting evidence to assess security posture and identify potential risks.
• Analyze identified risks, address the points of non-compliance, and provide clear, risk-based recommendations.
• Engage directly with suppliers and internal stakeholders to clarify security, compliance and risk-related matters.
• Act as a trusted advisor on third-party cybersecurity risks throughout supplier onboarding and lifecycle management processes.
• Collaborate with procurement, legal, compliance, business and cybersecurity teams to ensure security requirements are appropriately addressed.
• Ensure assessments align with internal security standards, policies and corporate requirements.
• Drive continuous improvement of the Third-Party Risk Management (TPRM) process, methodologies, and assessment practices.
• Identify process gaps, inefficiencies and improvement opportunities, proposing and implementing corrective actions.
• Monitor emerging threats, regulatory requirements and industry best practices to ensure the assessment framework remains effective and up to date.

Job description

Billennium is a global technology company with over 20 years of experience, committed to innovation and empowering businesses. As an employer, we offer a supportive, growth-focused environment where collaboration and creativity thrive. Join us to shape the future of technology together!

About the Role:

For our client, a global automotive company, we are currently looking for a Senior Security Engineer. We are looking for a cybersecurity professional with strong experience in third-party risk management, security assessments and governance activities. The successful candidate should be comfortable assessing a broad range of technologies and services, working with international suppliers and navigating complex enterprise environments.

What we are looking for:

• Minimum 5 years of professional experience in cybersecurity, information security, IT risk management or related areas.
• Minimum 3 years of hands-on experience performing third-party security assessments, supplier security reviews, technology risk assessments or similar activities.
• Demonstrated experience analyzing technical and security documentation and translating findings into actionable risk decisions.
• Experience working in large enterprise environments with multiple stakeholders and governance processes.
• Experience in collaborating with external suppliers and managing security-related discussions and follow-up activities.
• Strong understanding of cybersecurity principles and risk management practices.
• Practical knowledge of Third-Party Risk Management (TPRM), supply chain security and vendor risk assessment methodologies.
• Experience assessing security controls against recognized frameworks and standards, including: ISO 2700, NIST Cybersecurity Framework, SOC 2, NIS2, DORA, CIS Controls
• Understanding of AI governance, AI-related risks and regulatory requirements such as the EU AI Act.
• Experience working with internal corporate security policies, standards and compliance requirements.
• Strong analytical, problem-solving and critical-thinking skills.
• Excellent written and verbal communication skills in English.

Preferred Qualifications

• CISSP, SSCP, CISM, CRISC or equivalent cybersecurity certifications.
• ISO 27001 Lead Auditor, Lead Implementer or similar audit/compliance certifications.
• Experience contributing to the design, implementation or improvement of security governance and risk management processes.

Responsibilities:

Third-Party Security Assessments

• Perform security risk assessments of third-party suppliers, products and services, including SaaS solutions, COTS applications, cloud services, hardware and OT-related solutions.
• Review supplier responses, technical documentation, security reports and supporting evidence to assess security posture and identify potential risks.
• Analyze identified risks, address the points of non-compliance, and provide clear, risk-based recommendations.
• Engage directly with suppliers and internal stakeholders to clarify security, compliance and risk-related matters.
• Act as a trusted advisor on third-party cybersecurity risks throughout supplier onboarding and lifecycle management processes.
• Collaborate with procurement, legal, compliance, business and cybersecurity teams to ensure security requirements are appropriately addressed.
• Ensure assessments align with internal security standards, policies and corporate requirements.

Process Improvement & Development

• Drive continuous improvement of the Third-Party Risk Management (TPRM) process, methodologies, and assessment practices.
• Identify process gaps, inefficiencies and improvement opportunities, proposing and implementing corrective actions.
• Monitor emerging threats, regulatory requirements and industry best practices to ensure the assessment framework remains effective and up to date.

Our offer:

• Comprehensive benefits - enjoy Udemy for Business, private medical care, Multisport card, veterinary package, language lessons, and shopping vouchers.
• Flexibility - adaptable working hours and remote/hybrid work options to suit your lifestyle & location.
• Career growth - access opportunities for professional development and learning, including perks related to our official partnerships with global IT giants: Microsoft, AWS, Snowflake, Salesforce & amp; more.
• Global collaboration - work with a diverse, international team.
• Innovative environmentbe part of a forward-thinking and growth-oriented workplace.
• Engaging community - Work with passionate professionals and participate in team-building events, hackathons, and CSR initiatives to make an impact beyond work.
• Team-building events including our company tradition (annual company event in Mazury).
• A pleasant surprise to start your journey with us in the form of a welcome pack.

Recruitment process:

• HR call
• Client Interview
• Decision/ Feedback