Third Party Cyber and Information Security - Remediation

INFOPLUS TECHNOLOGIES; Kraków; On-site; PLN 180,000 - 280,000; Full time

Job summary

INFOPLUS TECHNOLOGIES in Kraków is seeking an experienced specialist to assess and remediate third-party cybersecurity risks, review vendor security evidence, and track compliance with industry standards. The role requires collaboration with Risk, Compliance, Audit and Security stakeholders and an ability to apply robust risk assessment practices.

You will work onsite in Kraków three days per week, contributing to remediation plans and evidence reviews while upholding high standards of

Qualifications

• 5+ years of experience in third-party risk assessment, cybersecurity assessments, or regulatory/audit issue closure.
• Strong audit mindset and risk assessment expertise.
• Knowledge of security standards such as NIST, ISO 27001, PCI DSS, COBIT, or SOC 2.
• Excellent communication and analytical skills.
• Bachelor's degree in a relevant field.
• Ability to work onsite in Kraków 3 days per week.

Responsibilities

• Assess and remediate third-party cybersecurity risks and control gaps.
• Review vendor security evidence, risk treatment plans, and remediation actions.
• Evaluate security controls, policies, and procedures against industry standards.
• Track compliance and recommend effective risk mitigation measures.
• Collaborate with Risk, Compliance, Audit, and Security stakeholders.

Skills

Risk assessment

Audit / regulatory

Third-party risk

Communication

Analytical thinking

Education

Bachelor's degree in a relevant field

Tools

NIST

ISO 27001

PCI DSS

COBIT

SOC 2

Job description

Key Responsibilities:

• Assess and remediate third-party cybersecurity risks and control gaps.
• Review vendor security evidence, risk treatment plans, and remediation actions.
• Evaluate security controls, policies, and procedures against industry standards.
• Track compliance and recommend effective risk mitigation measures.
• Collaborate with Risk, Compliance, Audit, and Security stakeholders.

Mandatory Requirements:

• 5+ years of experience in third-party risk assessment, cybersecurity assessments, or regulatory/audit issue closure.
• Strong audit mindset and risk assessment expertise.
• Knowledge of security standards such as NIST, ISO 27001, PCI DSS, COBIT, or SOC 2.
• Excellent communication and analytical skills.
• Bachelor's degree in a relevant field.
• Ability to work onsite in Kraków 3 days per week.

Preferred Certifications:

CISSP, CISA, CISM, CRISC, CEH, or CTPRP.