Strategic Cyber Risk & Compliance Lead

Aricoma; Warszawa; On-site; PLN 180,000 - 320,000; Full time

Job summary

Aricoma is seeking an experienced Cybersecurity Risk Manager to strengthen governance, risk management, and resilience across critical ICT services in Europe. You will assess threats, shape policy, and guide secure development and supplier risk programs.

In a specialised security environment, you will mentor ICT teams, advise on cloud and AI security controls, and ensure compliance with EU information handling standards.

Qualifications

• Experience with systems handling EU Classified Information (EUCI).
• Active and valid CONFIDENTIEL UE / EU CONFIDENTIAL clearance.

Responsibilities

• analyse cybersecurity threats and attacker profiles
• conduct ICT security risk assessments using ITSRM2, EBIOS, MAGERIT, PILAR, FENCE, and similar tools
• develop and maintain security policies, procedures, and guidance
• advise on Secure SDLC, security-by-design, and security-by-default
• support threat modelling and define technical security requirements
• provide cybersecurity guidance and training to ICT teams
• assess and manage third-party and supplier security risks
• contribute to business continuity, governance, compliance, reporting, and stakeholder engagement

Skills

Threat modelling

Security governance

Risk assessment

Compliance awareness

Stakeholder communication

Security assessment

Tools

ITSRM2

EBIOS

MAGERIT

PILAR

FENCE

Job description

Aricoma is seeking an experienced Cybersecurity Risk Manager to strengthen governance, risk management, and resilience across critical ICT services in Europe. You will assess threats, shape policy, and guide secure development and supplier risk programs.

In a specialised security environment, you will mentor ICT teams, advise on cloud and AI security controls, and ensure compliance with EU information handling standards.