Senior Third Party Cyber and Information Security Analyst

MPower Plus; Województwo małopolskie; Hybrid; PLN 180,000 - 240,000; Full time

Job summary

MPower Plus in Krakow, Poland (Hybrid) seeks a Senior Third Party Cyber and Information Security Analyst for a 6-12+ month contract. The role emphasizes third-party risk assessment, remediation guidance to vendors, and closure of regulatory and audit issues.

You will communicate findings to senior management and compliance teams, evaluate vendor controls, and craft risk mitigation strategies to reduce cyber exposure.

Qualifications

• Bachelor's degree with professional certification in Cybersecurity or Audit, Cloud Security or related field.
• Experience in third-party risk assessment or cybersecurity assessment and regulatory and audit issue closure.
• Ability to communicate effectively with both technical and non-technical stakeholders.

Responsibilities

• Monitor and suggest remediation requirements to third parties and business stakeholders.
• Communicate assessment findings and recommendations to internal stakeholders including senior management, legal and compliance teams.
• Analyze vendor security controls, policies, and procedures to ensure regulatory compliance and industry best practices.
• Develop and implement risk mitigation strategies to address identified vulnerabilities and reduce organizational exposure to cyber threats.

Skills

Communication

Analytical thinking

Problem solving

Regulatory awareness

Education

Bachelor's degree in Cybersecurity or Audit

Job description

Role: Senior Third Party Cyber and Information Security Analyst

Location: Krakow, Poland(Hybrid)

Contract : 6 - 12+ Months contract

Key Responsibilities

Bachelor's degree with professional certification in Cybersecurity or Audit, Cloud Security or a related field of study;

Experience in third-party risk assessment or cybersecurity assessment and regulatory and audit issue closure

Closely monitor and suggest the remediation requirements to third parties & business stakeholders

ability to communicate effectively with both technical and non-technical stakeholders;

strong analytical and problem-solving skills;

certifications such as Certified Third-Party Risk Professional (CTPRP) or Certified Information Systems Security Professional (CISSP) or CISA (Certified Information Security Auditor) are a plus

business risk management, or regulatory and audit issue experience in NFRI/operational risk issues closure, in line with standard procedures.

exposure to cyber tech risk assessments of third-party vendors to identify potential security threats and vulnerabilities outcome.

analyze and evaluate vendor security controls, policies, and procedures to ensure compliance with regulatory requirements and industry best practices.

develop and implement risk mitigation strategies to address identified vulnerabilities and reduce the organization's exposure to cyber threats.

communicate assessment findings and recommendations (including control requirements) to internal stakeholders, including senior management, legal, and compliance teams.

monitor and track vendor compliance with security policies and procedures through ongoing assessment activities.