Senior Third Party Cyber and Information Security Analyst

E-Solutions; Kraków; Hybrid; PLN 180,000 - 300,000; Full time

Job summary

E-Solutions in Kraków is seeking a senior professional to review remediation evidence from vendors and validate closure of cybersecurity gaps. The role involves assessing third-party risk, evaluating controls against standards, and coordinating remediation with Legal and Compliance.

Ideal candidates have 5+ years in risk assessment or audit closure, strong analytical skills, and excellent English. The position offers hybrid work from Kraków with at least 3 days in-office.

Qualifications

• 5+ years in third-party risk assessment, cybersecurity assessment, or audit closure.
• Strong audit mindset and understanding of business, operations, and cybersecurity risks.
• Ability to review evidence, identify control gaps, and recommend remediation actions.
• Strong analytical, problem-solving, communication, and stakeholder management skills.
• Bachelor's degree in Cybersecurity, Audit, Cloud Security, or a related field.

Responsibilities

• Review remediation evidence and validate the closure of cybersecurity control gaps.
• Assess third-party cybersecurity risks, vulnerabilities, and control deficiencies.
• Evaluate vendor security controls against regulatory requirements and industry standards.
• Recommend remediation measures and monitor their implementation.
• Support the closure of business risk, audit, and regulatory issues.
• Communicate findings and remediation requirements to business stakeholders, senior management, Legal, and Compliance teams.
• Collaborate with CISO, Risk, Compliance, and Supplier Management teams.

Skills

5+ years experience

Audit & regulatory risk

Evidence review & remediation

Analytical & stakeholder comms

English proficiency

Education

Bachelor's degree in Cybersecurity, Audit, Cloud Security, or related

Tools

NIST ISO 27001 PCI DSS SOC 2

Job description

The role focuses on reviewing and validating the remediation of cybersecurity control gaps identified during third-party risk assessments. The candidate will assess evidence submitted by vendors to ensure risks are properly addressed and aligned with the bank’s security policies and regulatory requirements.

Key Responsibilities

• Review remediation evidence and validate the closure of cybersecurity control gaps.
• Assess third-party cybersecurity risks, vulnerabilities, and control deficiencies.
• Evaluate vendor security controls against regulatory requirements and industry standards.
• Recommend remediation measures and monitor their implementation.
• Support the closure of business risk, audit, and regulatory issues.
• Communicate findings and remediation requirements to business stakeholders, senior management, Legal, and Compliance teams.
• Collaborate with CISO, Risk, Compliance, and Supplier Management teams.

Required Skills & Experience

• 5+ years of experience in third-party risk assessment, cybersecurity assessment, or audit and regulatory issue closure.
• Strong audit mindset and understanding of business, operational, and cybersecurity risks.
• Ability to review evidence, identify control gaps, and recommend remediation actions.
• Strong analytical, problem-solving, communication, and stakeholder management skills.
• Bachelor's degree in Cybersecurity, Audit, Cloud Security, or a related field.

Preferred Skills & Certifications

• Knowledge of NIST, ISO 27001, PCI DSS, COBIT, and SOC 2.
• Certifications such as CISSP, CISA, CISM, CRISC, CEH, CTPRP, or ITIL are an advantage.

Candidate Requirements

• Excellent spoken and written English.
• Detail-oriented, organized, and proactive, with the ability to work independently and collaboratively.
• Strong risk identification and reporting skills.
• Willingness to work from the Krakow office at least 3 days per week.