Strategic Information Security GRC Manager

Sapsf; Województwo pomorskie; On-site; PLN 285,000 - 394,000; Full time

Job summary

MacGregor is seeking an Information Security Governance, Risk & Compliance Manager to develop and maintain governance, risk, and compliance programs. You will shape policies, standards, and training, drive audits, and manage risk across the organization.

You will lead remediation efforts, coordinate internal and external audits, and oversee third-party risk assessments while staying current with regulations and industry best practices.

Qualifications

• Good written and verbal communication skills.
• Strong analytical and organizational skills.
• Collaborative mindset and comfort working cross-functionally.
• Bachelor's degree in Information Security, Computer Science, Business, or related field (or equivalent practical experience).
• Relevant certifications preferred, but not required, such as CISA, CRISC, CISSP, CISM, or ISO 27001 Lead Auditor/Implementer.
• 2–5 years of experience in information security, risk management, internal audit, or compliance.
• Working knowledge of common frameworks and regulations (e.g., NIST, ISO 27001, NIS2, GDPR).
• Ability to present information in clear, sufficient and understandable manner
• Proficiency with Microsoft Office, particularly spreadsheets and presentations.

Responsibilities

• Develop, implement, and maintain information security policies, standards, and procedures.
• Conduct risk assessments to identify, evaluate, and prioritize risks; maintain the risk register.
• Coordinate and support internal and external audits.
• Track remediation of audit findings and control gaps through to closure.
• Manage third-party/vendor risk assessments, including security questionnaires and reviews.
• Monitor compliance and manage controls aligned with frameworks, laws, regulations, and contractual obligations.
• Develop and deliver security awareness and compliance training.
• Support incident response and business continuity/disaster recovery planning.
• Prepare reports for leadership on risk posture, compliance status, and audit progress.
• Stay current on emerging regulations, threats, and industry best practices.

Skills

Communication skills

Analytical skills

Cross-functional collaboration

Education

Bachelor's degree in Information Security, Computer Science, Business, or related field

Certifications: CISA, CRISC, CISSP, CISM, ISO 27001 Lead Auditor/Implementer

Tools

Microsoft Office

Job description

MacGregor is seeking an Information Security Governance, Risk & Compliance Manager to develop and maintain governance, risk, and compliance programs. You will shape policies, standards, and training, drive audits, and manage risk across the organization.

You will lead remediation efforts, coordinate internal and external audits, and oversee third-party risk assessments while staying current with regulations and industry best practices.