Technology Specialist - Security, Procurement

Heineken; Kraków; On-site; PLN 180,000 - 240,000; Full time

Job summary

HEINEKEN Kraków is seeking a Technology Specialist – Security within the Digital & Technology team. You will coordinate procurement security activities, support policy adherence, and drive security controls across procurement systems to ensure secure by design principles.

Ideal candidates hold a Bachelor’s or Master’s in IT/security with 5+ years in IT security, strong stakeholder management, and experience with GRC, IAM and SIEM.

Qualifications

• Bachelor’s or master’s degree in business information technology or a related field.
• 5+ years of IT security experience.
• Strong knowledge of security standards and audits.
• Excellent consulting and communication skills with stakeholders.

Responsibilities

• Coordinating D&T Procurement Domain Product Security-related activities to ensure OTIF delivery.
• Supporting procurement security policy adherence across domains.
• Overseeing IT control activities to keep procurement systems secure and compliant.
• Managing security audits and control effectiveness assessments.
• Driving remediation based on audit findings and internal controls.
• Aligning with global security governance and auditors.

Skills

Security governance

Stakeholder management

Communication skills

Consulting skills

Architectural thinking

Education

Bachelor's or master's degree in business information technology or related field

Tools

GRC

IAM

SIEM

Job description

Function:Digital & Technology

Digital & Technology Team (D&T) is an integral division of HEINEKEN Business Services Poland. We are committed to making Heineken the most connected brewery. That includes digitalizing and integrating our processes, ensuring best-in-class technology, and embedding a data-driven culture. By joining us you will work in one of the most dynamic and innovative teams and have a direct impact on building the future of Heineken!

Would you like to meet the Team, see our office and much more? Visit our website: Heineken (heineken-dt.pl )

The Cybersecurity Chapter in D&T Support Functions department is a cross-function security enablement team that helps D&T Support Functions Product Teams build, operate, and maintain secure and compliant platforms through security governance, risk management, standardization, awareness, and operational assurance, while acting as the bridge between D&T Support Functions and Global Information Security. Team goal is to enable sustainable growth and innovation by strengthening the security posture and resiliency of D&T Support Functions platforms.

Technology Specialist – Security will operate as member of D&T Support Functions Cybersecurity Chapter andsupport D&T Procurement team and work in close cooperation with specific architects, technical specialists, suppliers, TS&O Global Information Security partners and to a lesser extend Global P&CI and Global Audit. Ultimately to ensure Security by Design principles are applied across the board.

Your responsibilities would include:

coordinating D&T Procurement Domain Product Security-related activities, ensuring work is done OTIF in accordance with Heineken Cybersecurity Policy and Security by Design principles

supporting D&T Domain Product Functional and Technical streams in performing their work in accordance with Heineken Cybersecurity Policy

overseeing IT control activities to keep Procurement systems secure and in compliance withHeineken Security Standard and reporting it to D&T stakeholders.

managing Central IT Audits & Security Control Effectiveness Assessment (SCEA).

drivingremediation and mitigation activities based on CITA, SCEA and internal audit / controls execution findings.

ensuring D&T SF Procurement works in line with the security roadmap defined by the TS&O Global Information Security team

ensuring operational user management and monitoring across the D&T Procurement systems (e.g. support with mapping MyAccess Enterprise roles to Procurement system specific entitlements roles, supporting user and role attestation process, SoD/CA reviews, etc.)

challenging D&T and business parties at the technical and functional level in case of potential security breaches

escalatingto D&T MT level in case of (imminent) security breaches

regular alignment with global security governance bodies (e.g. Global Information Security Global Audit, P&CI and external auditors) on security governance, ownership and relevant HEINEKEN MT assurance topics, connecting the dots, translating the general requirements into actual practical solutions at Procurement level.

You are a good candidate if you:

Bachelor’s or master’s degree in business information technology or a related field

• relevant knowledge and certifications in the field of Security, e.g. CISSP / CCSP / CISM / CISA / CRISC / ISO27001 / COBIT 5

5+ years of working experience in the field of IT security

experience with IT suppliers and vendor management, including teamwork coordination

stakeholder management, including strong relationship-building and reporting skills

ability to translate technical security into business-related terms

practical work experience with GRC, IAM and SIEM solutions

general level of functional knowledge of business processes (Procurement), understanding their importance and relation with application security

knowledge of the NIST Cybersecurity framework and how this can be applied to application security

experience in working with auditors, knowledge of audit procedures, audit phases and techniques of risk management

excellent consulting and communication skills to be applied at a large range of different stakeholder levels

strong architectural skills (both software and landscape) to understand the impact of the different elements on each other and D&T in general

At HEINEKEN Kraków, we take integrity and ethical conduct seriously. If someone has concerns about a possible violation of legal regulations indicated in Polish Whistleblowing Act or our Code of Business Conduct, we encourage them to speak up . Cases can be reported to global team or locally (in line with the local HBSP Whistleblowing procedure) by selecting proper option in this tool or by communicating it on hotline.

#LI-AK1#LI-HYBRID

This role allows you to apply 50 % copyright tax-deductible costs up to 80% of your tasks. (Koszty Uzyskania Przychodu)